UCL-INGI / INGInious

INGInious is a secure and automated exercises assessment platform using your own tests, also providing a pluggable interface with your existing LMS.
http://www.inginious.org
Other
202 stars 139 forks source link

[frontend] Adding the use of Argon2id for password hashing #978

Closed AlexandreDoneux closed 7 months ago

AlexandreDoneux commented 10 months ago

Related to issue #358

This pull request contains changes regarding multiple elements :

Password hashes with argon2id are now stored in the database using a prepend "argon2id-" to allow future changes.

AlexandreDoneux commented 9 months ago

Rebase on 2e692aa7.

AlexandreDoneux commented 7 months ago

Rebase on e2de1c37.

AlexandreDoneux commented 7 months ago

I'd recommend moving the latest_method prepending into the hash_password method as suggested

Done