diff options
| author | Hasan Ramezani <hasan.r67@gmail.com> | 2020-03-26 13:23:32 +0100 |
|---|---|---|
| committer | Mariusz Felisiak <felisiak.mariusz@gmail.com> | 2020-03-31 10:52:56 +0200 |
| commit | 8aa71f4e8706b6b3e4e60aaffb29d004e1378ae3 (patch) | |
| tree | 9b8b61af27e03bc07a5ee4b95f380b525ff7c5df /docs | |
| parent | b3ab92cc5ad5e851692f36432465a9150e8b3313 (diff) | |
Fixed #31375 -- Made contrib.auth.hashers.make_password() accept only bytes or strings.
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/releases/3.1.txt | 4 | ||||
| -rw-r--r-- | docs/topics/auth/passwords.txt | 16 |
2 files changed, 14 insertions, 6 deletions
diff --git a/docs/releases/3.1.txt b/docs/releases/3.1.txt index e4992b0a4a..492622d3bd 100644 --- a/docs/releases/3.1.txt +++ b/docs/releases/3.1.txt @@ -603,6 +603,10 @@ Miscellaneous * The admin CSS classes ``row1`` and ``row2`` are removed in favor of ``:nth-child(odd)`` and ``:nth-child(even)`` pseudo-classes. +* The :func:`~django.contrib.auth.hashers.make_password` now requires its + argument to be a string or bytes. Other types should be explicitly cast to + one of these. + .. _deprecated-features-3.1: Features deprecated in 3.1 diff --git a/docs/topics/auth/passwords.txt b/docs/topics/auth/passwords.txt index 134ef14583..cc8ca55501 100644 --- a/docs/topics/auth/passwords.txt +++ b/docs/topics/auth/passwords.txt @@ -402,12 +402,16 @@ from the ``User`` model. .. function:: make_password(password, salt=None, hasher='default') Creates a hashed password in the format used by this application. It takes - one mandatory argument: the password in plain-text. Optionally, you can - provide a salt and a hashing algorithm to use, if you don't want to use the - defaults (first entry of ``PASSWORD_HASHERS`` setting). See - :ref:`auth-included-hashers` for the algorithm name of each hasher. If the - password argument is ``None``, an unusable password is returned (one that - will never be accepted by :func:`check_password`). + one mandatory argument: the password in plain-text (string or bytes). + Optionally, you can provide a salt and a hashing algorithm to use, if you + don't want to use the defaults (first entry of ``PASSWORD_HASHERS`` + setting). See :ref:`auth-included-hashers` for the algorithm name of each + hasher. If the password argument is ``None``, an unusable password is + returned (one that will never be accepted by :func:`check_password`). + + .. versionchanged:: 3.1 + + The ``password`` parameter must be a string or bytes if not ``None``. .. function:: is_password_usable(encoded_password) |