#5046 - Refactor forum driver password API

  • By
  • Added
  • 14 views
Identifier #5046
Issue type Feature request or suggestion
Title Refactor forum driver password API
Status Completed
Tags

Roadmap: v11 (custom)

Handling member Chris Graham
Addon General / Uncategorised
Description PHPBB now uses Argon2id for storing its passwords. This breaks forum_authorise_login in PHPBB as we can no longer directly compare hashes; we must use PHP's password_verify. However, we cannot remove support for hash comparison as this is a fairly new feature; some passwords may still be stored in PHPBB with the old hashing.

The password API might therefore need to be refactored to accommodate this problem.
Steps to reproduce

Funded? No
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".

Rating

Unrated