Incorrect arguments to password.php10 service

Created on 17 January 2023, almost 2 years ago
Updated 23 May 2023, over 1 year ago

Problem/Motivation

The password.php10 service is currently given the same arguments as the olderpassword.php service, even though the constructor parameters are different.

Steps to reproduce

Change the password service to use password.php10, and update a user's password. The password_hash() function will fail because it's not given a correct algorithm.

Proposed resolution

Options:

  1. Provide static algorithm and options values to the service
  2. Provide an empty set of arguments so that the defaults are used (unless overridden).

Remaining tasks

User interface changes

API changes

Possibly deprecate the password_hash_cost service parameter.

Data model changes

πŸ› Bug report
Status

Fixed

Version

2.0

Component

Code

Created by

πŸ‡¨πŸ‡¦Canada gapple

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024