passlib 1.7.4 + bcrypt 4.2.1 emit trapped AttributeError warning on every login #46
Labels
No labels
blocked:gate-fetch
blocked:gate-fetch
blocked:gate-implement
blocked:gate-plan
blocked:needs-attention
blocked:needs-decision
blocked:needs-human
blocked:no-procedure
blocked:preflight
bug
feature-request
in-progress
lint-cleanup
needs-decompose
needs-triage
ops-task
quickfix
security/medium
triage-approved
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
Mark/msp_c2#46
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
requirements.txt pins passlib[bcrypt]==1.7.4 and bcrypt==4.2.1. bcrypt 4.1+ removed the about module, so passlib 1.7.4 logs "(trapped) error reading bcrypt version / AttributeError: module bcrypt has no attribute about" on every password hash/verify. It is trapped and harmless, but it pollutes logs and test output. Fix: pin bcrypt==4.0.1 (last version with about) or upgrade passlib to a version that reads the version differently.