Support passwords stored as SCRAM-SHA-256

Squarespace / pgbedrock

Manage a Postgres cluster's roles, role memberships, schema ownership, and privileges

https://pgbedrock.readthedocs.io/en/latest/

Other

316 stars 35 forks source link

Support passwords stored as SCRAM-SHA-256 #70

Open johanfleury opened 2 years ago

johanfleury commented 2 years ago

This allows passing the password as plain text, a md5 hash or a SCRAM-SHA-256 hash. The password will be compared to whatever hash is stored in Postgres and updated accordingly.

The SCRAM-SHA-256 hash algorithm for password storage was introduced in Postgres version 10 and made the default in Postgres version 14.

CLAassistant commented 2 years ago

All committers have signed the CLA.

johanfleury commented 2 years ago

I had to drop support for Python 2 and upgrade to 3.7 to support hmac.digest.