Skip to content
Snippets Groups Projects
Forked from uffd / uffd
Source project has a limited visibility.
  • Julian's avatar
    117e257c
    Unified password hashing for User and Signup · 117e257c
    Julian authored
    Previously User used salted SHA512 with OpenLDAP-style prefix syntax and
    Signup used crypt. Both models had their own hashing and verification
    code. Now both use OpenLDAP-style syntax with support for all traditional
    formats including crypt. Salted SHA512 is used for new User and Signup
    passwords.
    
    Existing Signup objects are migrated to the new format and remain functional.
    User passwords now support gradual migration to another hash algorithm when
    it is changed in the future.
    
    This code is planned to be used for database-stored API and OAuth2 client
    secrets.
    117e257c
    History
    Unified password hashing for User and Signup
    Julian authored
    Previously User used salted SHA512 with OpenLDAP-style prefix syntax and
    Signup used crypt. Both models had their own hashing and verification
    code. Now both use OpenLDAP-style syntax with support for all traditional
    formats including crypt. Salted SHA512 is used for new User and Signup
    passwords.
    
    Existing Signup objects are migrated to the new format and remain functional.
    User passwords now support gradual migration to another hash algorithm when
    it is changed in the future.
    
    This code is planned to be used for database-stored API and OAuth2 client
    secrets.