Class UnsaltedSHA1PasswordHasher

django.contrib.auth.hashers.UnsaltedSHA1PasswordHasher

Very insecure algorithm that you should *never* use; store SHA1 hashes with an empty salt.

Declaration

class UnsaltedSHA1PasswordHasher(BasePasswordHasher)

Documentation

This class is implemented because Django used to accept such password
hashes. Some older Django installs still have these values lingering
around so we need to handle and upgrade them properly.

Methods

▶ def decode(self, encoded) override
inherited doc Return a decoded database value.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.decode.
```
The result is a dictionary and should contain `algorithm`, `hash`, and
`salt`. Extra keys can be algorithm specific like `iterations` or
`work_factor`.
```
▶ def encode(self, password, salt) override
inherited doc Create an encoded database value.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.encode.
```
The result is normally formatted as "algorithm$salt$hash" and
must be fewer than 128 characters.
```

▶ def harden_runtime(self, password, encoded) override

inherited doc Bridge the runtime gap between the work factor supplied in `encoded` and the work factor suggested by this hasher.

source link

This method overrides django.contrib.auth.hashers.BasePasswordHasher.harden_runtime.

Taking PBKDF2 as an example, if `encoded` contains 20000 iterations and
`self.iterations` is 30000, this method should run password through
another 10000 iterations of PBKDF2. Similar approaches should exist
for any hasher that has a work factor. If not, this method should be
defined as a no-op to silence the warning.

▶ def safe_summary(self, encoded) override
inherited doc Return a summary of safe values.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.safe_summary.
```
The result is a dictionary and will be used where the password field
must be displayed to construct a safe representation of the password.
```
▶ def salt(self) override
inherited doc Generate a cryptographically secure nonce salt in ASCII.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.salt.
▶ def verify(self, password, encoded) override
inherited doc Check if the given password is correct.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.verify.

Inherited methods

Methods inherited from django.contrib.auth.hashers.BasePasswordHasher:
must_update