summaryrefslogtreecommitdiff
path: root/docs
Commit message (Collapse)AuthorAgeFilesLines
* django compatibility part 2Eli Collins2013-12-222-3/+13
| | | | | | | | * added implementation of django 1.6's bcrypt_sha256 hasher, and UTs * added django16 premade context to passlib.apps, made it default django_context * test_ext_django now makes use of django16_context * passlib.ext.django.utils.get_preset_config() now uses django16_context * tox 'django' and 'django-py3' now test bcrypt integration
* added support for bcrypt library (issue 49),Eli Collins2013-12-202-9/+12
| | | | also split bcrypt handler tests out into separate file for ease of testing
* django compatibility updates (should fix issue 50)Eli Collins2013-12-201-1/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | passlib.ext.django & it's tests have gotten out of sync with django, leading to a number of UT failures, as reported in issue 50. tests now pass on django 1.2 through 1.6 passlib.ext.django ------------------ mimic changes in django's hasher logic: * handle unsalted_sha1 hasher (django 1.4.6+) * check_password(): empty hashes return False, rather throw error (django 1.5+ * allow empty passwords (django 1.6+) * generate unusuable password suffixes (django 1.6+) passlib.hash ------------ * django_des_crypt: added "use_duplicate_salt" class attr, allowing tests to enable django 1.4+ style hashes which omit 1st salt. * django_disabled: added support for django 1.6+ random suffixes passlib.tests ------------- * test_ext_django: lots of changes to verify django 1.5/1.6 behavior * test_handlers_django: split django tests out of test_handlers to make it easiers to run django-related tests. * added workaround for encoding glitch in salted_md5 / salted_sha1 hashers (django 1.5+)
* minor documentation updatesEli Collins2013-01-194-32/+80
| | | | | | | | | | | * added some backwards-compat & error handling notes to CryptContext, as suggested by Thomas Waldmann (https://code.google.com/p/passlib/issues/detail?id=27#c2) * clarified alg descriptions and internal comments for lmhash, md5_crypt, cisco, et al * deprecated_method() decorator now checks if ".. deprecated::" stanza already present in docstring * hash_needs_update() won't be removed until release 2.0
* doc tweakEli Collins2012-09-301-2/+2
|
* updated to use cloud_sptheme 1.5 -- fancier table layoutsEli Collins2012-09-206-53/+65
|
* various documentation updatesEli Collins2012-09-208-72/+209
|
* documentation tweaksEli Collins2012-08-022-3/+3
|
* bcrypt documentation updates - changed pybcrypt url, added details re: ↵Eli Collins2012-08-024-36/+42
| | | | builtin-bcrypt implementation
* large number of assorted documentation updatesEli Collins2012-08-0115-139/+215
|
* project-wide whitespace & comment cleanup (it's been a couple of years)Eli Collins2012-08-0119-94/+97
|
* _CryptConfig now pre-calculates default scheme for each category, checks ↵Eli Collins2012-07-091-2/+2
| | | | | | | against deprecated list (closes issue 39) * also added some unittests to catch 3 cases covered in issue 39, and some others as well.
* removed some unused files, tweaked some internal commentsEli Collins2012-06-271-53/+0
|
* various minor updates to documentation & code commentsEli Collins2012-06-273-13/+29
|
* md5_crypt deprecated by author, updated docs accordinglyEli Collins2012-06-272-11/+25
|
* reworked platform_crypt_support test to be more granular, updated to account ↵Eli Collins2012-06-271-2/+2
| | | | for FreeBSD 8.3+ supporting SHA512-Crypt
* pip requirements file for building docs1.6Eli Collins2012-05-171-0/+1
|
* minor documentation updates - typo in changes, better listing of ident ↵Eli Collins2012-05-171-3/+3
| | | | values for bcrypt
* minor documentation updatesEli Collins2012-05-082-18/+26
|
* updated index entriesEli Collins2012-05-0225-28/+57
|
* forgot to document the relaxed=True keyword, and the strict-parameters policy.Eli Collins2012-05-021-8/+10
|
* last minute documentation updatesEli Collins2012-05-013-7/+11
|
* added environment variables to doc indexEli Collins2012-05-013-0/+7
|
* loads of documentation updatesEli Collins2012-05-0120-106/+113
|
* moved is_ascii_codec() helper to utilsEli Collins2012-05-011-0/+1
|
* updated various bit of documentation; made 1.6 changelog presentableEli Collins2012-04-308-14/+29
|
* removed annoying builtin-bcrypt warning, decreased rounds on some test ↵Eli Collins2012-04-301-5/+4
| | | | vectors for speed
* mass rename of old alias for PasswordHash interfaceEli Collins2012-04-272-2/+2
|
* updated front matter and other documentationEli Collins2012-04-2713-242/+362
|
* merged rewrite of CryptContext documentation - (near-) full tutorial and ↵Eli Collins2012-04-279-651/+977
| | | | reference
* merging rewrite of all hash documentation, and password hash apiEli Collins2012-04-2742-1359/+1485
| | | | | | | * password hash api rewritten to center around PasswordHash abstract class * extended walkthrough and documentation for PasswordHash interface * pared down the per-hash examples, added links to PasswordHash * updates docs and warnings
* near complete rewrite of django plugin, now making publicEli Collins2012-04-273-111/+127
| | | | | | | | | | | - monkeypatching now formalized w/ a patch manager, and should be *much* more resilient. - patch states reduced greatly, simplified code and tests - now handles django 1.4 correctly - patches hashers module as well (had to write some new wrappers) - added experimental methods GenericHandler.parsehash() to back our wrapper of Hasher.safe_summary() - XXX: doesn't currently import current HASHER state, - XXX: can't import hashers into passlib either -- though left initial notes on this
* added support for the new Django 1.4 hash formatsEli Collins2012-04-271-11/+39
| | | | | | - updated salt handling of the existing django hashes, in a way which should be backwards compatible w/ django 1.0 - UTs now test Django hasher output against passlib handlers (reverse was already being done) - refactor of fuzz testing to reuse some of the methods.
* added deprecated="auto" support to CryptContextEli Collins2012-04-271-0/+3
|
* stripping out "passprep" feature - code was working, but the api isn't read ↵Eli Collins2012-04-271-36/+0
| | | | for release. will adjust issue 24.
* sped up pbkdf2 implementation by 60% or so - upped the rounds for all pbkdf2 ↵Eli Collins2012-04-191-0/+2
| | | | hashes
* disabling saslprep() support under Jython - it lacks the stringprep moduleEli Collins2012-04-171-0/+5
|
* a bunch of bugfixes found during unittestingEli Collins2012-04-171-1/+1
| | | | | | | | | | * bsdi_crypt apparently available on openbsd 4.9 * typo fixes * ConfigParser apparently only uses OrderedDict for >= PY27, adjusted CryptContext test accordingly * fixed test that depended on sha256_crypt.default_rounds * handle os_crypt backend w/ no fallback (bcrypt) * let _norm_rounds accept longs
* CryptPolicy deprecation, part 5 - updated docs, changelog, benchmark scriptEli Collins2012-04-175-88/+113
|
* updated passlib.apache module's api - more flexible to use, changed some ↵Eli Collins2012-04-171-13/+20
| | | | ambiguous method names
* issue warning if app requests even bsdi_crypt roundsEli Collins2012-04-131-10/+17
|
* work on des_crypt familyEli Collins2012-04-132-2/+2
| | | | | * cleaned up source of des_crypt variants and DES util functions * DES utils functions now have tighter input validation, full UT coverage
* clarify behavior for secret=None and hash=NoneEli Collins2012-04-111-9/+10
| | | | | | | | | | | | | | | | | | | | | | | * passing a non-string secret or non-string hash to any CryptContext or handler method will now reliably result in a TypeError. previously, passing hash=None to many handler identify() and verify() methods would return False, while others would raise a TypeError. other handler methods would alternately throw ValueError or TypeError when passed a value that wasn't unicode or bytes. the various CryptContext methods also behaved inconsistently, depending on the behavior of the underlying handler. all of these behaviors are gone, they should all raise the same TypeError. * redid many of the from_string() methods to verify the hash type. * moved secret type & size validation to GenericHandler's encrypt/genhash/verify methods. this cheaply made the secret validation global to all hashes, and lets _calc_digest() implementations trust that the secret is valid. * updated the CryptContext and handler unittests to verify the above behavior is adhered to.
* ldap salted digest improvementsEli Collins2012-04-091-3/+12
| | | | | | * support variable salt size of 4-16 bytes [issue 30]. * throw correct error when invalid base64 encoding is encountered. * added some test vectors for the above.
* *all* hashes now throw PasswordSizeError if password is larger than 4096 ↵Eli Collins2012-04-091-0/+1
| | | | chars; to prevent DOS issues.
* removed default policy file & objectEli Collins2012-04-091-8/+0
| | | | | | | was using default policy to store recommended defaults for hashes, but it only affects CryptContext objects, and users seem to frequent using the handler objects directly - so going to store recommended defaults in the handler from now on.
* bcrypt workEli Collins2012-03-121-0/+1
| | | | | | | * added code to shoehorn $2$-support wrapper for bcryptor backend * added PasslibSecurityWarning when builtin backend is enabled (still considered whether it should be enabled by default) * py3 compat fix for repair_unused
* updated passlib.ext.django; made some notes about django 1.4Eli Collins2012-03-121-32/+33
| | | | (may not support django 1.4 until passlib 1.7)
* doc tweaksEli Collins2012-03-124-7/+19
|
* updated test support & py3 compat code from an external libraryEli Collins2012-03-121-9/+9
| | | | | | | | | | | | | | | | passlib.tests ------------- * deprecated support for unittest 1... accumulated too many backports, planning to require unittest2 in next release. * case_prefix renamed to shortDescription * test case now archives & clears warning registry state in addition to warning filter state passlib.utils.compat -------------------- * a bunch of the bytes-related functions were renamed for clarity * NativeStringIO alias added * trange alias merged into irange