I'm running Django 2.2.4 with the default PASSWORD_HASHES
setting. I'm trying to bulk import our users with import_users
. The bulk import works for all of the fields I care about, except the password. The user is unable to login. My code generates this payload:
{"users": [{"active": true, "sendSetPasswordEmail": false, "skipVerification": true, "email": "<email address>@outsideinc.com", "id": "2ba87aa2-033c-44e5-8251-cbf2ecc07d8a", "registrations": [{"applicationId": "ac5656bb-08e7-4433-b5a6-05a7652d756c", "roles": ["user", "free_membership", "registered"]}], "encryptionScheme": "salted-pbkdf2-hmac-sha256", "factor": 150000, "salt": "DxFgAtoVimgE", "password": "wZzgYlJnnTiJ/HaS1XSx+uCsmC3To5FMQ1yMGqX//8s="}], "validateDbConstraints": true}
which is derived from this password entry: 'pbkdf2_sha256$150000$DxFgAtoVimgE$wZzgYlJnnTiJ/HaS1XSx+uCsmC3To5FMQ1yMGqX//8s='
I'm not able to login to this users account on fusion auth using their password, but the password does hash correctly in Django:
>>> User.objects.get(email='<email>@outsideinc.com').check_password('0p;/)P:?')
True
How am I misusing the import_users
end point?