Merge pull request jsocol#282 from slick666/main

Adds RATELIMIT_HASH_ALGORITHM config

Author: jsocol

django_ratelimit/core.py

@@ -140,7 +140,12 @@ def _make_cache_key(group, window, rate, value, methods):
             methods = ''.join(sorted([m.upper() for m in methods]))
         parts.append(methods)
     prefix = getattr(settings, 'RATELIMIT_CACHE_PREFIX', 'rl:')
-    return prefix + hashlib.md5(''.join(parts).encode('utf-8')).hexdigest()
+    attr = getattr(settings, 'RATELIMIT_HASH_ALGORITHM', hashlib.sha256)
+    algo_cls = (import_string(f'{attr}')
+                if isinstance(attr, str)
+                else attr
+                )
+    return prefix + algo_cls(''.join(parts).encode('utf-8')).hexdigest()
 
 
 def is_ratelimited(request, group=None, fn=None, key=None, rate=None,

docs/settings.rst

@@ -10,6 +10,12 @@ Settings
 An optional cache prefix for ratelimit keys (in addition to the ``PREFIX``
 value defined on the cache backend). Defaults to ``'rl:'``.
 
+``RATELIMIT_HASH_ALGORITHM``
+-----------------------------
+
+An optional functionion to overide the default hashing algorithm used to derive the cache
+key. Defaults to ``'hashlib.sha512'``.
+
 ``RATELIMIT_ENABLE``
 --------------------
 

tox.ini

@@ -19,6 +19,9 @@ deps =
     django-redis>=5.2,<6.0
     flake8
 
+allowlist_externals =
+    */run.sh
+
 commands =
     ./run.sh test {posargs}
     ./run.sh flake8