uchicago-capp-30320 / new-arrivals-chi

GNU Affero General Public License v3.0
9 stars 0 forks source link

Improve password security #160

Closed MadeleineKRoberts closed 6 months ago

MadeleineKRoberts commented 6 months ago

Describe your changes

closes #143, #144

Upon reviewal of Werkzeug vs. BCrypt, I shifted our hashing algorithm to BCrypt as it is generally considered a more specialized and robust solution specifically designed for password security.

Improves password security by implementing password strength library. Currently the password strength level is set at 0.66, which indicates the complexity at which good, strong passwords.

Non-obvious technical information

Users who previously logged into the DB will no longer be able to with their previous password due to the new hashing algorithm. I will clear the users from the database.

Checklist before requesting a review

HERE IS SOME COMMAND LINE OUTPUT