Clarify SECURITY_DEPRECATED_HASHING_SCHEMES

[savchenko]

Make configuration explicit. I also wonder if it's worth setting by default:

SECURITY_DEPRECATED_HASHING_SCHEMES = ["auto"]
SECURITY_HASHING_SCHEMES = ["sha256_crypt"]

[jwag956]

How about we just change 'SECURITY_DEPRECATED_HASHING_SCHEMES to ["auto"] - that seems the best/easiest. Given current default config - that change actually wouldn't change anything.

[savchenko]

How about we just change 'SECURITY_DEPRECATED_HASHING_SCHEMES to ["auto"] - that seems the best/easiest.

Sounds good. Just need to make sure that sha256_crypt is the first one, order is important.

Maybe include link https://passlib.readthedocs.io/en/stable/lib/passlib.context.html as well, I had to read it to comprehend what's actually going on.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 98.49%. Comparing base (25ad68d) to head (ba007b7).

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #1003   +/-   ##
=======================================
  Coverage   98.49%   98.49%           
=======================================
  Files          37       37           
  Lines        4777     4777           
=======================================
  Hits         4705     4705           
  Misses         72       72           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[jwag956]

fixed with #1009