#5046 - Refactor forum driver password API
| Identifier | #5046 |
|---|---|
| Issue type | Feature request or suggestion |
| Title | Refactor forum driver password API |
| Status | Completed |
| Tags |
Roadmap: v11 (custom) |
| Handling member | Chris Graham |
| Addon | General / Uncategorised |
| Description | PHPBB now uses Argon2id for storing its passwords. This breaks forum_authorise_login in PHPBB as we can no longer directly compare hashes; we must use PHP's password_verify. However, we cannot remove support for hash comparison as this is a fairly new feature; some passwords may still be stored in PHPBB with the old hashing.
The password API might therefore need to be refactored to accommodate this problem. |
| Steps to reproduce | |
| Funded? | No |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".
Comments