| Age | Commit message (Collapse) | Author |
|---|
|
|
|
Unfortunately Ubuntu LTS does not have passlib 1.6 yet,
even though Debian Stable has it now, so for the sake
of making life easier for everybody we'll stick with
passlib 1.5 for one more version.
This reverts commit c950224ef78dd5c63325d6a194d93601789f3ca6.
|
|
Debian Jessie provides Passlib 1.6 so we're not bound to 1.5 anymore.
Use 1.6's "deprecated=auto" feature: will automatically mark any hash
other than the default as "to update" rather than having to list all of
the supported hashes to deprecate (and remember to update in lockstep
with the schemes list).
When not specified explicitly, the default hash is the first one in the
schemes list.
|
|
|
|
cc5860fbcf86568f2ca7404cf8c47e41357c0f3d
|
|
Switch to system random as number generator instead of the
default PRNG, which is not recommended for generating
security-related values such as unique tokens.
(Complements parent commit)
Closes #7761
|
|
Commit 856bc6f2b147970245f96e26d882f114c32e035c
may cause an issue if the auth_crypt module
is loaded before the base module. That should never
happen in normal circumstances, but forcing an
explicit import does not hurt and makes it safer.
Closes #6742
|
|
|
|
|
|
|
|
Let 2015 be a year without modelines!
cf #4174
|
|
A squashed merge is required as the conversion of the apiculture branch from
bzr to git was not correctly done. The git history contains irrelevant blobs
and commits. This branch brings a lot of changes and fixes, too many to list
exhaustively.
- New orm api, objects are now used instead of ids
- Environements to encapsulates cr uid context while maintaining backward compatibility
- Field compute attribute is a new object oriented way to define function fields
- Shared browse record cache
- New onchange protocol
- Optional copy flag on fields
- Documentation update
- Dead code cleanup
- Lots of fixes
|
|
also move utility methods to class bottom to improve reading experience
(hopefully)
|
|
|
|
|
|
|
|
Applies to new and yet-to-be-encrypted users, existing already-encrypted will
keep logging in as usual, their password storage will be upgraded on next
password *change*.
|
|
|
|
When `base_crypt` was updated for v7, the auto-encryption
at installation was dropped, with user passwords only
encrypted on-demand whenever the user would connect.
It is important to encrypt all passwords immediately to
prevent password compromission for user who do not
login often or even for deactivated users who are not
allowed to login anymore.
Fixes https://bugs.launchpad.net/openobject-addons/+bug/1280152
Based on LP merge proposal by Nicolas Bessi (Camptocamp):
https://code.launchpad.net/~camptocamp/openobject-addons/improve_auth_crypt_3_please_launchpad_work-nbi/+merge/206476
|
|
like auth_signup
bzr revid: dle@openerp.com-20130801162704-fbvghil7yir8zm8c
|
|
if not, not trying to crypt anything and raise
bzr revid: dle@openerp.com-20130801151539-z0bes7ylx5qwa8tw
|
|
default)
bzr revid: al@openerp.com-20121219113339-vhstwyo51jw0znqw
|
|
bzr revid: al@openerp.com-20121219112031-mtogxyq1fxsbopz0
|
