Hi,
Have you tested multiple servers with Django versions 3.0 and 3.1 with
`DEFAULT_HASHING_ALGORITHM = 'sha1'`? I created a branch with this setting,
with Django 3.1, and then I used it on our staging server. After I signed
up and logged in, I reverted to Django 3.0, and then one user was logged
out (who should be logged in) and another user got the exception `Incorrect
padding` (from `base64.b64decode(session_data.encode('ascii'))`). It looks
like the setting I created `DEFAULT_HASHING_ALGORITHM = 'sha1'` is ignored
with Django 3.1. I know you don't support downgrading Django, but this
might also affect users who run several servers in parallel, with Django
3.0 and 3.1.
When I downgraded I rolled back 2 migrations - one I created myself
(match_accounts.0008_auto_20200804_1453) and
(auth.0012_alter_user_first_name_max_length). But rolling back these
migrations looks like it's not related to this issue.
אורי
u...@speedy.net
On Mon, Aug 3, 2020 at 11:25 AM Mariusz Felisiak <felisiak.mari...@gmail.com>
wrote:
> Hi Markus,
>
> I don't see a clear path to do this, we cannot add a setting that
> accepts a string and immediately (in the next release) change it to a list,
> this will require a deprecation path etc. and will be really confusing to
> users. IMO we can reconsider this new feature in the next release with a
> different setting.
>
> Best,
> Mariusz
>
> --
> You received this message because you are subscribed to the Google Groups
> "Django developers (Contributions to Django itself)" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-developers+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-developers/77dfa750-21c2-42ef-a69c-077217746098n%40googlegroups.com
> <https://groups.google.com/d/msgid/django-developers/77dfa750-21c2-42ef-a69c-077217746098n%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>
--
You received this message because you are subscribed to the Google Groups
"Django developers (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-developers/CABD5YeF3p33QuL6104BLWttLenfoscdcmLZwEUBod78ORE5HdQ%40mail.gmail.com.
