#25993 closed Cleanup/optimization (invalid)
Integrate django-bcrypt or remove support.
Reported by: | Mariano Ignacio Baragiola | Owned by: | nobody |
---|---|---|---|
Component: | contrib.auth | Version: | 1.9 |
Severity: | Normal | Keywords: | bcrypt, django-bcrypt, custom user, py-bcrypt |
Cc: | Triage Stage: | Unreviewed | |
Has patch: | no | Needs documentation: | no |
Needs tests: | no | Patch needs improvement: | no |
Easy pickings: | yes | UI/UX: | no |
Description
According to:
https://docs.djangoproject.com/en/1.9/topics/auth/passwords/#using-bcrypt-with-django
Django supports bcrypt, but by using a thirdparty called django-bcrypt which itself uses py-bcrypt.
But the thing is, django-bcrypt last supported version is Django 1.4, the package is unmaintained. I submited a pullrequest to add support for custom users (since Django 1.5) but I don't think it'll get any attention, and if it does, future updates aren't guaranteed to keep rolling.
So, I propose to merge django-bcrypt into Django, or just remove its support. If there's interest in doing so, I volunteer to work on it.
Thanks in advance.
Django requires
bcrypt
, notdjango-bcrypt
. Did you confuse the two?pip install django[bcrypt]
installsbcrypt
.