AbandonTech / abandonauth

An Authentic Auth Service...
GNU General Public License v3.0
4 stars 2 forks source link

Research and implement an alternative to passlib bcrypt #151

Open fisher60 opened 2 months ago

fisher60 commented 2 months ago

Summary

Bcrypt is now considered legacy and the passlib library is no longer maintained.

The new recommended algorithms are either Argon2id or scrypt (if argon2id not available)

We can use python's standard lib hashlib for the scrypt algorithm https://docs.python.org/3/library/hashlib.html#hashlib.scrypt