3 ms·
Noticed the release notes mention a forced password reset for all users because of a hash change. Couldn't that be avoided by storing the hash type/version, an
by 0x0 13y ago
Noticed the release notes mention a forced password reset for all users because of a hash change.
Couldn't that be avoided by storing the hash type/version, and silently upgrade on the next successful login (when the password is available briefly in plaintext in the login request)?
- cridenour 13y agoThis is what Django does. Works very well.