Commit caace201 authored by Dom Sekotill's avatar Dom Sekotill
Browse files

Set upper limit on salt size for SHA256 passwords

parent e465be0b

kodo_sso/custom_auth/pass_hashers.py

+1 −1
Original line number Diff line number Diff line
@@ -20,7 +20,7 @@ class SHA256CryptPasswordHasher(hashers.BasePasswordHasher): 
	def encode(self, password, salt, iterations=None):

		return ''.join((

			self.algorithm,

			self.digest.encrypt(password, salt=salt,

			self.digest.encrypt(password, salt=salt[:16],

				rounds=iterations or self.iterations)

		))