mirror of
https://github.com/freedombox/FreedomBox.git
synced 2026-01-28 08:03:36 +00:00
1faee11d4d
Passwords will be automatically upgraded for each user on login. Usernames not yet upgraded are vulnerable to user enumeration attack due to difference in password check timing. No need to add build dependency on python3-argon2 because tests use a different Django configuration which does not use argon2 hash. Reviewed-by: James Valleroy <jvalleroy@mailbox.org>