Add more secure password storage via salt value and hmac

2026-07-31 12:20:56 +08:00 · 2012-07-18 13:27:30 -04:00
parent 1c606a242a
commit 68dd972bfa
8 changed files with 43 additions and 10 deletions
@@ -157,6 +157,9 @@ class DefaultSecurityTests(SecurityTest):
 class ConfiguredSecurityTests(SecurityTest):

    AUTH_CONFIG = {
+        'SECURITY_PASSWORD_HASH': 'bcrypt',
+        'SECURITY_PASSWORD_SALT': 'so-salty',
+        'SECURITY_PASSWORD_HMAC': True,
        'SECURITY_REGISTERABLE': True,
        'SECURITY_AUTH_URL': '/custom_auth',
        'SECURITY_LOGOUT_URL': '/custom_logout',