log roundup/password.py @ 8239:6bd11a73f2ed

age author description
Mon, 30 Dec 2024 02:57:46 -0500 John Rouillard issue2551253. default hash is PBKDF2-SHA512.
Sun, 24 Mar 2024 15:16:02 -0400 John Rouillard chore(lint): cleanups from ruff.
Sun, 24 Mar 2024 13:16:53 -0400 John Rouillard doc: fix spelling in comment.
Mon, 20 Nov 2023 17:12:46 -0500 John Rouillard fix: fix failing test when crypt is missing.
Sun, 23 Jul 2023 23:21:57 -0400 John Rouillard flake8: correct continutation line indent
Thu, 25 May 2023 09:38:39 -0400 John Rouillard Fix random_ import to use from import rather than import as
Sun, 07 May 2023 09:10:10 -0400 John Rouillard flake8 fixes
Sat, 01 Apr 2023 20:48:02 -0400 John Rouillard issue2551265 - deprecate SSHA password hash method
Sat, 01 Apr 2023 20:40:30 -0400 John Rouillard flake8 cleanups
Sat, 18 Mar 2023 14:16:31 -0400 John Rouillard flake8 fixes: whitespace, remove unused imports
Sun, 12 Mar 2023 20:28:53 -0400 John Rouillard Refeactor PBKDF2 and PBKDF2S5 to reuse code; fix python password.py
Tue, 28 Feb 2023 15:49:47 -0500 John Rouillard issue2551253 - Modify password PBKDF2 method to use SHA512
Sun, 26 Feb 2023 23:38:06 -0500 John Rouillard Make in file tests work again. Also allow manual testing without overriding PBKDF rounds
Sun, 26 Feb 2023 16:17:37 -0500 John Rouillard Fix round check/settings in needs_migration
Sun, 26 Feb 2023 15:38:49 -0500 John Rouillard Production PBKDF rounds back to 2M, test 1k; fix empty_form (python2)
Sun, 26 Feb 2023 11:06:04 -0500 John Rouillard Move imports to top of file out of test code path.
Sat, 25 Feb 2023 14:50:34 -0500 John Rouillard Modify code to reduce runtime when testing
Thu, 23 Feb 2023 19:34:39 -0500 John Rouillard issue2551251 - migrate pbkdf2 passwords if more rounds configured
Fri, 24 Feb 2023 00:37:37 -0500 John Rouillard tests are breaking with last commit. Restore a hopefully working tree while I figure out what's going on
Thu, 23 Feb 2023 19:34:39 -0500 John Rouillard issue2551251 - migrate pbkdf2 passwords if more rounds configured
Wed, 14 Sep 2022 20:23:42 -0400 John Rouillard flake8 - import order, spacing
Wed, 22 Jun 2022 15:19:35 -0400 John Rouillard Ignore crypt deprication warning
Sun, 20 Mar 2022 00:05:59 -0400 John Rouillard issue2551191 - Module deprication PEP 594. crypt
Sun, 12 Apr 2020 21:02:57 +0100 Christof Meerwald fixed string encoding of SSHA encoded passwords in Python 3
Sat, 28 Dec 2019 14:44:54 -0500 John Rouillard flake8 formatting changes.
Thu, 26 Dec 2019 21:16:10 -0500 John Rouillard Bandit - silence old hash warnings.
Fri, 01 Mar 2019 22:57:07 -0500 John Rouillard Add etag support to rest interface to prevent multiple users from
Sun, 05 Aug 2018 14:04:47 +0100 Christof Meerwald removed unused import of os module
Sat, 04 Aug 2018 22:40:16 +0100 Christof Meerwald reworked random number use
Thu, 02 Aug 2018 07:19:23 +0100 Christof Meerwald use PBKDF2 implementation from Python's hashlib, if available
Mon, 23 Jul 2018 21:40:31 +0100 Christof Meerwald fix encoding for hash functions
Wed, 25 Jul 2018 09:55:10 +0000 Joseph Myers Python 3 preparation: use bytes more in password handling.
Wed, 25 Jul 2018 09:05:58 +0000 Joseph Myers Python 3 preparation: unicode.
Wed, 25 Jul 2018 00:40:26 +0000 Joseph Myers Python 3 preparation: use string.ascii_letters instead of string.letters.
Wed, 25 Jul 2018 00:39:37 +0000 Joseph Myers Python 3 preparation: comparisons.
Tue, 24 Jul 2018 23:00:54 +0000 Joseph Myers Python 3 preparation: use range() instead of xrange().
Tue, 24 Jul 2018 21:39:58 +0000 Joseph Myers Python 3 preparation: "raise" syntax.
Sun, 08 Jul 2018 11:34:42 -0400 John Rouillard A real fix for the problem where:
Sat, 07 Jul 2018 22:02:41 -0400 John Rouillard Force all uses of random to use SystemRandom and abort if
Sat, 16 Apr 2016 22:49:38 -0400 John Rouillard issue 2550880: Ability to choose password store scheme and SSHA support.
Fri, 09 May 2014 17:32:44 +1000 John Kristensen Remove roundup/anypy/hashlib_.py
Mon, 18 Feb 2013 00:42:08 +0300 anatoly techtonik Increase generated password length to 12 symbols.
Wed, 28 Nov 2012 02:56:33 +0300 anatoly techtonik windows: Fix failing password tests due to missing crypt module
Wed, 16 Nov 2011 09:51:38 -0500 Eric S. Raymond Remove keyword expansions from CVS. All regression tests passed afterwards.
Sat, 16 Apr 2011 18:38:18 +0000 Ralf Schlatterbeck python2.4 compatibility fix
Fri, 15 Apr 2011 08:09:59 +0000 Ralf Schlatterbeck Add new config-option 'password_pbkdf2_default_rounds'...
Thu, 14 Apr 2011 18:27:51 +0000 Ralf Schlatterbeck use idea from Eli Collins to use a list of deprecated password encoding schemes
Thu, 14 Apr 2011 18:10:58 +0000 Ralf Schlatterbeck Add new config-option 'migrate_passwords' in section 'web'...
Thu, 14 Apr 2011 15:42:41 +0000 Ralf Schlatterbeck Second patch from issue2550688 -- with some changes:
Thu, 14 Apr 2011 12:24:59 +0000 Ralf Schlatterbeck Fix first part of Password handling security issue2550688
Thu, 12 Mar 2009 02:52:56 +0000 Richard Jones Add compatibility package to allow us to deal with Python versions 2.3..2.6.
Sun, 25 Dec 2005 15:38:40 +0000 Alexander Smishlajev keep plaintext password in Password object property (rfe [SF#1379447])
Sat, 03 Dec 2005 11:35:54 +0000 Alexander Smishlajev encodePassword: don't trim the salt string...
Mon, 10 May 2004 22:32:17 +0000 Richard Jones added MD5 scheme for password hiding
Mon, 22 Mar 2004 07:45:40 +0000 Richard Jones Implemented proper datatypes in mysql and postgresql backends...
Wed, 11 Feb 2004 23:55:10 +0000 Richard Jones documentation cleanup
Tue, 11 Nov 2003 00:35:14 +0000 Richard Jones Centralised conversion of user-input data to hyperdb values
Thu, 24 Apr 2003 07:51:52 +0000 Richard Jones email registered users shouldn't be able to log in [SF#714673] maint-0.5
Thu, 10 Apr 2003 05:12:42 +0000 Richard Jones set new email rego user password to random string
Thu, 09 Jan 2003 22:59:22 +0000 Richard Jones [[Metadata associated with this commit was garbled during conversion from CVS maint-0.5

Roundup Issue Tracker: http://roundup-tracker.org/