[TurboGears] Re: Identity now supports MD5 SHA1 hashed passwords

2006-01-07 Thread [EMAIL PROTECTED]

And how to use it? I'm trying with no sucess :-P

In dev.cfg I have tryed:
identity.soprovider.encryption_algorithm=sha1
and
identity.soprovider.password_encryption=sha1

I input data from DataController( classsql_class=TG_User ) but the
password is allways simple text :-|



[TurboGears] Re: Identity now supports MD5 SHA1 hashed passwords

2006-01-07 Thread Jeff Watkins



On 7 Jan, 2006, at 9:16 am, [EMAIL PROTECTED] wrote:



And how to use it? I'm trying with no sucess :-P

In dev.cfg I have tryed:
identity.soprovider.encryption_algorithm=sha1
and
identity.soprovider.password_encryption=sha1

I input data from DataController( classsql_class=TG_User ) but the
password is allways simple text :-|



As I mentioned in the initial message, you must manually encrypt the  
password using `encrypt_password` on the current provider. For example:


u= TG_User( userId='jeff', displayName='Jeff Watkins',
emailAddress='[EMAIL PROTECTED]',
password=identity.current_provider.encrypt_password 
( 'foobar' ) )



--
Jeff Watkins
http://newburyportion.com/

Computers, they're just a fad.




[TurboGears] Re: Identity now supports MD5 SHA1 hashed passwords

2005-12-22 Thread Kevin Dangoor

On 12/22/05, Jeff Watkins [EMAIL PROTECTED] wrote:
 Just a note, you will have to store pre-hashed passwords, which makes
 using CatWalk in this scenario somewhat difficult.

Would it make sense to create a _set_ method that hashes the password?
That should work with CatWalk.

Kevin


[TurboGears] Re: Identity now supports MD5 SHA1 hashed passwords

2005-12-22 Thread Jeff Watkins
Unfortunately, that would then make it impossible to set the password to a previously calculated hash. Plus it would necessitate moving the knowledge of the encryption mechanism out to the model. This would make sense if there were something like a HashColumn or similar in SQLObject.I'll give it some thought. But for now, at least MD5 and SHA1 is available... On 22 Dec, 2005, at 3:12 pm, Kevin Dangoor wrote:Would it make sense to create a _set_ method that hashes the password? That should work with CatWalk.  -- Jeff Watkinshttp://newburyportion.com/Computers, they're just a fad.