diff roundup/password.py @ 7241:78c3f4aced76

issue2551265 - deprecate SSHA password hash method Users using SSHA passwords will have their passwords transprently upgraded to PBKDF2 derived hash on next login.
author John Rouillard <rouilj@ieee.org>
date Sat, 01 Apr 2023 20:48:02 -0400
parents 594b562ca99c
children 57f34b0b912c
line wrap: on
line diff
--- a/roundup/password.py	Sat Apr 01 20:40:30 2023 -0400
+++ b/roundup/password.py	Sat Apr 01 20:48:02 2023 -0400
@@ -395,9 +395,9 @@
     1
     """
 
-    deprecated_schemes = ["SHA", "MD5", "crypt", "plaintext"]
+    deprecated_schemes = ["SSHA", "SHA", "MD5", "crypt", "plaintext"]
     experimental_schemes = ["PBKDF2S5"]
-    known_schemes = ["PBKDF2", "SSHA"] + experimental_schemes + \
+    known_schemes = ["PBKDF2"] + experimental_schemes + \
                     deprecated_schemes
 
     def __init__(self, plaintext=None, scheme=None, encrypted=None,

Roundup Issue Tracker: http://roundup-tracker.org/