| Mon, 30 Dec 2024 02:57:46 -0500 |
John Rouillard |
issue2551253. default hash is PBKDF2-SHA512.
|
| Sun, 24 Mar 2024 15:16:02 -0400 |
John Rouillard |
chore(lint): cleanups from ruff.
|
| Sun, 24 Mar 2024 13:16:53 -0400 |
John Rouillard |
doc: fix spelling in comment.
|
| Mon, 20 Nov 2023 17:12:46 -0500 |
John Rouillard |
fix: fix failing test when crypt is missing.
|
| Sun, 23 Jul 2023 23:21:57 -0400 |
John Rouillard |
flake8: correct continutation line indent
|
| Thu, 25 May 2023 09:38:39 -0400 |
John Rouillard |
Fix random_ import to use from import rather than import as
|
| Sun, 07 May 2023 09:10:10 -0400 |
John Rouillard |
flake8 fixes
|
| Sat, 01 Apr 2023 20:48:02 -0400 |
John Rouillard |
issue2551265 - deprecate SSHA password hash method
|
| Sat, 01 Apr 2023 20:40:30 -0400 |
John Rouillard |
flake8 cleanups
|
| Sat, 18 Mar 2023 14:16:31 -0400 |
John Rouillard |
flake8 fixes: whitespace, remove unused imports
|
| Sun, 12 Mar 2023 20:28:53 -0400 |
John Rouillard |
Refeactor PBKDF2 and PBKDF2S5 to reuse code; fix python password.py
|
| Tue, 28 Feb 2023 15:49:47 -0500 |
John Rouillard |
issue2551253 - Modify password PBKDF2 method to use SHA512
|
| Sun, 26 Feb 2023 23:38:06 -0500 |
John Rouillard |
Make in file tests work again. Also allow manual testing without overriding PBKDF rounds
|
| Sun, 26 Feb 2023 16:17:37 -0500 |
John Rouillard |
Fix round check/settings in needs_migration
|
| Sun, 26 Feb 2023 15:38:49 -0500 |
John Rouillard |
Production PBKDF rounds back to 2M, test 1k; fix empty_form (python2)
|
| Sun, 26 Feb 2023 11:06:04 -0500 |
John Rouillard |
Move imports to top of file out of test code path.
|
| Sat, 25 Feb 2023 14:50:34 -0500 |
John Rouillard |
Modify code to reduce runtime when testing
|
| Thu, 23 Feb 2023 19:34:39 -0500 |
John Rouillard |
issue2551251 - migrate pbkdf2 passwords if more rounds configured
|
| Fri, 24 Feb 2023 00:37:37 -0500 |
John Rouillard |
tests are breaking with last commit. Restore a hopefully working tree while I figure out what's going on
|
| Thu, 23 Feb 2023 19:34:39 -0500 |
John Rouillard |
issue2551251 - migrate pbkdf2 passwords if more rounds configured
|
| Wed, 14 Sep 2022 20:23:42 -0400 |
John Rouillard |
flake8 - import order, spacing
|
| Wed, 22 Jun 2022 15:19:35 -0400 |
John Rouillard |
Ignore crypt deprication warning
|
| Sun, 20 Mar 2022 00:05:59 -0400 |
John Rouillard |
issue2551191 - Module deprication PEP 594. crypt
|
| Sun, 12 Apr 2020 21:02:57 +0100 |
Christof Meerwald |
fixed string encoding of SSHA encoded passwords in Python 3
|
| Sat, 28 Dec 2019 14:44:54 -0500 |
John Rouillard |
flake8 formatting changes.
|
| Thu, 26 Dec 2019 21:16:10 -0500 |
John Rouillard |
Bandit - silence old hash warnings.
|
| Fri, 01 Mar 2019 22:57:07 -0500 |
John Rouillard |
Add etag support to rest interface to prevent multiple users from
|
| Sun, 05 Aug 2018 14:04:47 +0100 |
Christof Meerwald |
removed unused import of os module
|
| Sat, 04 Aug 2018 22:40:16 +0100 |
Christof Meerwald |
reworked random number use
|
| Thu, 02 Aug 2018 07:19:23 +0100 |
Christof Meerwald |
use PBKDF2 implementation from Python's hashlib, if available
|
| Mon, 23 Jul 2018 21:40:31 +0100 |
Christof Meerwald |
fix encoding for hash functions
|
| Wed, 25 Jul 2018 09:55:10 +0000 |
Joseph Myers |
Python 3 preparation: use bytes more in password handling.
|
| Wed, 25 Jul 2018 09:05:58 +0000 |
Joseph Myers |
Python 3 preparation: unicode.
|
| Wed, 25 Jul 2018 00:40:26 +0000 |
Joseph Myers |
Python 3 preparation: use string.ascii_letters instead of string.letters.
|
| Wed, 25 Jul 2018 00:39:37 +0000 |
Joseph Myers |
Python 3 preparation: comparisons.
|
| Tue, 24 Jul 2018 23:00:54 +0000 |
Joseph Myers |
Python 3 preparation: use range() instead of xrange().
|
| Tue, 24 Jul 2018 21:39:58 +0000 |
Joseph Myers |
Python 3 preparation: "raise" syntax.
|
| Sun, 08 Jul 2018 11:34:42 -0400 |
John Rouillard |
A real fix for the problem where:
|
| Sat, 07 Jul 2018 22:02:41 -0400 |
John Rouillard |
Force all uses of random to use SystemRandom and abort if
|
| Sat, 16 Apr 2016 22:49:38 -0400 |
John Rouillard |
issue 2550880: Ability to choose password store scheme and SSHA support.
|
| Fri, 09 May 2014 17:32:44 +1000 |
John Kristensen |
Remove roundup/anypy/hashlib_.py
|
| Mon, 18 Feb 2013 00:42:08 +0300 |
anatoly techtonik |
Increase generated password length to 12 symbols.
|
| Wed, 28 Nov 2012 02:56:33 +0300 |
anatoly techtonik |
windows: Fix failing password tests due to missing crypt module
|
| Wed, 16 Nov 2011 09:51:38 -0500 |
Eric S. Raymond |
Remove keyword expansions from CVS. All regression tests passed afterwards.
|
| Sat, 16 Apr 2011 18:38:18 +0000 |
Ralf Schlatterbeck |
python2.4 compatibility fix
|
| Fri, 15 Apr 2011 08:09:59 +0000 |
Ralf Schlatterbeck |
Add new config-option 'password_pbkdf2_default_rounds'...
|
| Thu, 14 Apr 2011 18:27:51 +0000 |
Ralf Schlatterbeck |
use idea from Eli Collins to use a list of deprecated password encoding schemes
|
| Thu, 14 Apr 2011 18:10:58 +0000 |
Ralf Schlatterbeck |
Add new config-option 'migrate_passwords' in section 'web'...
|
| Thu, 14 Apr 2011 15:42:41 +0000 |
Ralf Schlatterbeck |
Second patch from issue2550688 -- with some changes:
|
| Thu, 14 Apr 2011 12:24:59 +0000 |
Ralf Schlatterbeck |
Fix first part of Password handling security issue2550688
|
| Thu, 12 Mar 2009 02:52:56 +0000 |
Richard Jones |
Add compatibility package to allow us to deal with Python versions 2.3..2.6.
|
| Sun, 25 Dec 2005 15:38:40 +0000 |
Alexander Smishlajev |
keep plaintext password in Password object property (rfe [SF#1379447])
|
| Sat, 03 Dec 2005 11:35:54 +0000 |
Alexander Smishlajev |
encodePassword: don't trim the salt string...
|
| Mon, 10 May 2004 22:32:17 +0000 |
Richard Jones |
added MD5 scheme for password hiding
|
| Mon, 22 Mar 2004 07:45:40 +0000 |
Richard Jones |
Implemented proper datatypes in mysql and postgresql backends...
|
| Wed, 11 Feb 2004 23:55:10 +0000 |
Richard Jones |
documentation cleanup
|
| Tue, 11 Nov 2003 00:35:14 +0000 |
Richard Jones |
Centralised conversion of user-input data to hyperdb values
|
| Thu, 24 Apr 2003 07:51:52 +0000 |
Richard Jones |
email registered users shouldn't be able to log in [SF#714673]
maint-0.5
|
| Thu, 10 Apr 2003 05:12:42 +0000 |
Richard Jones |
set new email rego user password to random string
|
| Thu, 09 Jan 2003 22:59:22 +0000 |
Richard Jones |
[[Metadata associated with this commit was garbled during conversion from CVS
maint-0.5
|