In which file frappe md5 the password

ahmadRagheb · September 28, 2017, 6:06pm

hi ,
any one know where frappe handle the password encryption with md5 and could we change the hash method to another one ?

max_morais_dmm · September 29, 2017, 2:24am

@ahmadRagheb
Frappe dont use md5, frappe use Fernet

github.com

frappe/frappe/blob/develop/frappe/utils/password.py

# Copyright (c) 2015, Frappe Technologies Pvt. Ltd. and Contributors
# License: MIT. See LICENSE

import string

from cryptography.fernet import Fernet, InvalidToken
from passlib.context import CryptContext
from passlib.hash import mysql41, pbkdf2_sha256
from passlib.registry import register_crypt_handler
from pypika.terms import Values

import frappe
from frappe import _
from frappe.query_builder import Table
from frappe.utils import cstr, encode

Auth = Table("__Auth")


class LegacyPassword(pbkdf2_sha256):

This file has been truncated. show original

Yakulu · September 29, 2017, 4:50am

And please note that Fernet method is used, so SHA256 algorithm.