Re: Password Policy Adherence. Cannot use the passwords used before

2019-02-11 Thread Simon A
Yes that's very true. I guess I acquired a phobia for diving into the source code because of my first programming language (J**A) because it felt like I was reading cryptic stuff. But not with Python. On Monday, February 11, 2019 at 9:08:35 PM UTC+8, Jason wrote: > > Sometimes going through the

Re: Password Policy Adherence. Cannot use the passwords used before

2019-02-11 Thread Jason
Sometimes going through the source code is the easiest way to figuring out the problem :-) -- You received this message because you are subscribed to the Google Groups "Django users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: Password Policy Adherence. Cannot use the passwords used before

2019-02-10 Thread Simon A
Hi Jason, Thank you for your response, really appreciate the help. I was working on your suggestion but then stumbled across django-password-validators which seems to do the required task for me. For now I will go with this one. But I will surely include the github for django when learning

Re: Password Policy Adherence. Cannot use the passwords used before

2019-02-10 Thread Jason
ClassyCBV doesn't contain everything in django, so that is probably related to your confusion. In classycbv PasswordChangeView's attributes, you can see form_class = which is what is called in PCV's Post handler

Re: Password Policy Adherence. Cannot use the passwords used before

2019-02-10 Thread Simon A
4227 >> >> >> >> >> >> >> >> *From:* django-users@googlegroups.com [mailto: >> django-users@googlegroups.com] *On Behalf Of *James Bennett >> *Sent:* Friday, February 8, 2019 9:00 AM >> *To:* django-users@googlegroups.com >> *S

Re: Password Policy Adherence. Cannot use the passwords used before

2019-02-09 Thread Simon A
27 > > > > > > > > *From:* django-users@googlegroups.com [mailto: > django-users@googlegroups.com] *On Behalf Of *James Bennett > *Sent:* Friday, February 8, 2019 9:00 AM > *To:* django-users@googlegroups.com > *Subject:* Re: Password Policy Adherence. Cannot

RE: Password Policy Adherence. Cannot use the passwords used before

2019-02-08 Thread Matthew Pava
Adherence. Cannot use the passwords used before I'm going to suggest you step back and consider whether the policies you want to implement are good policies. A good, solidly-researched set of recommendations is NIST SP800-63B: https://pages.nist.gov/800-63-3/sp800-63b.html In particular, NIST suggests

Re: Password Policy Adherence. Cannot use the passwords used before

2019-02-08 Thread James Bennett
I'm going to suggest you step back and consider whether the policies you want to implement are good policies. A good, solidly-researched set of recommendations is NIST SP800-63B: https://pages.nist.gov/800-63-3/sp800-63b.html In particular, NIST suggests the following: * Do not use a policy

Re: Password Policy Adherence. Cannot use the passwords used before

2019-02-08 Thread Jason
I haven't found anything like a drop-in replacement, but this should be fairly simple for you to do. when a password changes, the hash of the former password is stored in a different table with a reference to the user and the timestamp. when a new password is entered in as a reset, you

Password Policy Adherence. Cannot use the passwords used before

2019-02-07 Thread Simon A
Hello, I'm trying to make my django app follow this policy, that the user cannot user his/her last 6 passwords that were already used before. I tried using the django-password-policies library but I'm getting a lot of errors. I think it's not compatible anymore with the current version of