Merge pull request #783 from Club-Alpin-Annecy/argon2

jnguiot · web-flow · commit 9afe015ca5aa · 2025-03-10T20:57:50.000+01:00
[INTERNAL] Phase to argon2 password hashing
diff --git a/collectives/models/user/model.py b/collectives/models/user/model.py
@@ -94,7 +94,7 @@ class UserModelMixin:
     :type: :py:class:`datetime.date`"""
 
     password = db.Column(
-        PasswordType(schemes=["pbkdf2_sha512"]),
+        PasswordType(schemes=["argon2", "pbkdf2_sha512"], deprecated=["pbkdf2_sha512"]),
         nullable=True,
         info={"label": "Mot de passe"},
     )
diff --git a/requirements.txt b/requirements.txt
@@ -29,6 +29,7 @@ phonenumbers
 zeep
 Pillow
 PyYAML
+argon2-cffi
 # Home made fixed version of staled pip
 git+https://github.com/Club-Alpin-Annecy/Flask-Images@master#egg=Flask-Images
 git+https://github.com/Club-Alpin-Annecy/flask-marshmallow.git@dev#egg=flask-marshmallow

Original file line number	Diff line number	Diff line change
`@@ -94,7 +94,7 @@ class UserModelMixin:`
`94`	`94`	:type: :py:class:`datetime.date`"""
`95`	`95`
`96`	`96`	`password = db.Column(`
`97`		`- PasswordType(schemes=["pbkdf2_sha512"]),`
	`97`	`+ PasswordType(schemes=["argon2", "pbkdf2_sha512"], deprecated=["pbkdf2_sha512"]),`
`98`	`98`	`nullable=True,`
`99`	`99`	`info={"label": "Mot de passe"},`
`100`	`100`	`)`