deon/phpldapadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix for ARGON2 passwords, they shouldnt be base64 encoded. Fixes #316

Browse Source
This commit is contained in:
Deon George 2025-05-03 23:37:32 +10:00
parent 75dbb37d8b
commit f8d7819153
2 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
app/Classes/LDAP/Attribute/Password/Argon2i.php
View File

@ -10,16 +10,16 @@ final class Argon2i extends Base
public static function subid(string $password): bool public static function subid(string $password): bool
{ {
return str_starts_with(base64_decode(self::password($password)),self::identifier.'$'); return str_starts_with(self::password($password),self::identifier.'$');
} }
public function compare(string $source,string $compare): bool public function compare(string $source,string $compare): bool
{ {
return password_verify($compare,base64_decode($this->password($source))); return password_verify($compare,$this->password($source));
} }
public function encode(string $password): string public function encode(string $password): string
{ {
return sprintf('{%s}%s',self::key,base64_encode(password_hash($password,PASSWORD_ARGON2I))); return sprintf('{%s}%s',self::key,password_hash($password,PASSWORD_ARGON2I));
} }
} }

4
tests/server/openldap/schema/modify/99-argon.ldif Normal file
View File

@ -0,0 +1,4 @@
dn: cn=z-module{0},cn=config
changetype: modify
add: olcModuleLoad
olcModuleLoad: argon2