Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fixed CVE-2016-2513 -- Fixed user enumeration timing attack during login. | Florian Apolloner | 2016-03-01 | 1 | -1/+57 |
| | | | | This is a security fix. | ||||
* | Fixed #26187 -- Removed weak password hashers from PASSWORD_HASHERS. | Tim Graham | 2016-02-22 | 1 | -0/+19 |
| | |||||
* | Refs #26022 -- Used context manager version of assertRaises in tests. | Hasan | 2016-01-29 | 1 | -2/+4 |
| | |||||
* | Increased the default PBKDF2 iterations for the 1.10 release cycle. | Tim Graham | 2015-09-23 | 1 | -3/+3 |
| | |||||
* | Fixed typo in "pbkdf2" test names. | Tim Graham | 2015-09-19 | 1 | -2/+2 |
| | |||||
* | Removed support for Python 3.3. | Tim Graham | 2015-06-18 | 1 | -1/+1 |
| | |||||
* | Fixed #24115 -- Allowed bcrypt hashers to upgrade passwords on rounds change. | Tim Graham | 2015-03-30 | 1 | -0/+32 |
| | | | | Thanks Florian Apolloner for the review. | ||||
* | Moved contrib.auth tests out of contrib. | Tim Graham | 2015-02-11 | 1 | -0/+327 |