diff options
| author | Bert JW Regeer <bertjw@regeer.org> | 2016-04-14 21:27:37 -0600 |
|---|---|---|
| committer | Bert JW Regeer <bertjw@regeer.org> | 2016-04-14 21:27:37 -0600 |
| commit | 2e05d18130e24768ef374f237500b15908579259 (patch) | |
| tree | 7aa2e753e6ff8c128cee1c4587fd9a22e0cdfd19 | |
| parent | 1cf1323a25c32099c2c371c5a5fce536a5b3c2b4 (diff) | |
| download | pyramid-2e05d18130e24768ef374f237500b15908579259.tar.gz pyramid-2e05d18130e24768ef374f237500b15908579259.tar.bz2 pyramid-2e05d18130e24768ef374f237500b15908579259.zip | |
Update documentation
| -rw-r--r-- | pyramid/authentication.py | 20 |
1 files changed, 1 insertions, 19 deletions
diff --git a/pyramid/authentication.py b/pyramid/authentication.py index a5fdb724d..e6b888db2 100644 --- a/pyramid/authentication.py +++ b/pyramid/authentication.py @@ -421,13 +421,6 @@ class AuthTktAuthenticationPolicy(CallbackAuthenticationPolicy): """A :app:`Pyramid` :term:`authentication policy` which obtains data from a Pyramid "auth ticket" cookie. - .. warning:: - - The default hash algorithm used in this policy is MD5 and has known - hash collision vulnerabilities. The risk of an exploit is low. - However, for improved authentication security, use - ``hashalg='sha512'``. - Constructor Arguments ``secret`` @@ -549,7 +542,7 @@ class AuthTktAuthenticationPolicy(CallbackAuthenticationPolicy): ``hashalg`` - Default: ``md5`` (the literal string). + Default: ``sha512`` (the literal string). Any hash algorithm supported by Python's ``hashlib.new()`` function can be used as the ``hashalg``. @@ -559,21 +552,10 @@ class AuthTktAuthenticationPolicy(CallbackAuthenticationPolicy): ``hashalg`` will imply that all existing users with a valid cookie will be required to re-login. - A warning is emitted at startup if an explicit ``hashalg`` is not - passed. This is for backwards compatibility reasons. - This option is available as of :app:`Pyramid` 1.4. Optional. - .. note:: - - ``md5`` is the default for backwards compatibility reasons. However, - if you don't specify ``md5`` as the hashalg explicitly, a warning is - issued at application startup time. An explicit value of ``sha512`` - is recommended for improved security, and ``sha512`` will become the - default in a future Pyramid version. - ``debug`` Default: ``False``. If ``debug`` is ``True``, log messages to the |