Module hashers

Classes

• class Argon2PasswordHasher
  Secure password hashing using the argon2 algorithm.
• class BCryptPasswordHasher
  Secure password hashing using the bcrypt algorithm
• class BCryptSHA256PasswordHasher
  Secure password hashing using the bcrypt algorithm (recommended)
• class BasePasswordHasher
  Abstract base class for password hashers
• class CryptPasswordHasher
  Password hashing using UNIX crypt (not recommended)
• class MD5PasswordHasher
  The Salted MD5 password hashing algorithm (not recommended)
• class PBKDF2PasswordHasher
  Secure password hashing using the PBKDF2 algorithm (recommended)
• class PBKDF2SHA1PasswordHasher
  Alternate PBKDF2 hasher which uses SHA1, the default PRF
• class SHA1PasswordHasher
  The SHA1 password hashing algorithm (not recommended)
• class UnsaltedMD5PasswordHasher
  Incredibly insecure algorithm that you should *never* use; stores unsalted MD5 hashes without the algorithm prefix, also accepts MD5 hashes with an empty salt.
• class UnsaltedSHA1PasswordHasher
  Very insecure algorithm that you should *never* use; store SHA1 hashes with an empty salt.

Functions

• ▶ def check_password(password, encoded, setter=None, preferred='default')

  Return a boolean of whether the raw password matches the three part encoded digest.

  source link

  If setter is specified, it'll be called when you need to
  regenerate the password.

  Reexports

  • Imported in django.contrib.auth.base_user.
• ▶ def get_hasher(algorithm='default')

  Return an instance of a loaded password hasher.

  source link

  If algorithm is 'default', return the default hasher. Lazily import hashers
  specified in the project's settings file if needed.

• ▷ def get_hashers() @functools.lru_cache()

  @functools.lru_cache()
  def get_hashers()

  source link
• ▷ def get_hashers_by_algorithm() @functools.lru_cache()

  @functools.lru_cache()
  def get_hashers_by_algorithm()

  source link
• ▶ def identify_hasher(encoded)

  Return an instance of a loaded password hasher.

  source link

  Identify hasher algorithm by examining encoded hash, and call
  get_hasher() to return hasher. Raise ValueError if
  algorithm cannot be identified, or if hasher is not loaded.

  Reexports

  • Imported in django.contrib.auth.forms.
• ▶ def is_password_usable(encoded)

  Return True if this password wasn't generated by User.set_unusable_password(), i.e. make_password(None).

  source link

  Reexports

  • Imported in django.contrib.auth.base_user.
• ▶ def make_password(password, salt=None, hasher='default')

  Turn a plain-text password into a hash for database storage

  source link

  Same as encode() but generate a new random salt. If password is None then
  return a concatenation of UNUSABLE_PASSWORD_PREFIX and a random string,
  which disallows logins. Additional random string reduces chances of gaining
  access to staff or superuser accounts. See ticket #20079 for more info.

  Reexports

  • Imported in django.contrib.auth.base_user.
  • Imported in django.contrib.auth.models.
• ▷ def mask_hash(hash, show=6, char="*")

  Return the given hash, with only the first ``show`` number shown. The rest are masked with ``char`` for security reasons.

  source link
• ▷ def reset_hashers(**kwargs) @receiver(setting_changed)

  @receiver(setting_changed)
  def reset_hashers(**kwargs)

  source link

Generated by nedoc v0.9 at 2020-12-29 14:04