David Taylor
9238767f7e
FEATURE: Persist password hashing algorithm/params in database ( #20980 )
...
Previously, Discourse's password hashing was hard-coded to a specific algorithm and parameters. Any changes to the algorithm or parameters would essentially invalidate all existing user passwords.
This commit introduces a new `password_algorithm` column on the `users` table. This persists the algorithm/parameters which were use to generate the hash for a given user. All existing rows in the users table are assumed to be using Discourse's current algorithm/parameters. With this data stored per-user in the database, we'll be able to keep existing passwords working while adjusting the algorithm/parameters for newly hashed passwords.
Passwords which were hashed with an old algorithm will be automatically re-hashed with the new algorithm when the user next logs in.
Values in the `password_algorithm` column are based on the PHC string format (https://github.com/P-H-C/phc-string-format/blob/master/phc-sf-spec.md ). Discourse's existing algorithm is described by the string `$pbkdf2-sha256$i=64000,l=32$`
To introduce a new algorithm and start using it, make sure it's implemented in the `PasswordHasher` library, then update `User::TARGET_PASSWORD_ALGORITHM`.
2023-04-11 10:16:28 +01:00
..
2023-03-02 08:10:16 +10:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-03-08 10:39:12 +10:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-03-23 12:39:38 -05:00
2023-03-10 13:45:01 +08:00
2023-04-03 18:36:59 +08:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-02-06 18:24:12 +00:00
2022-07-28 10:27:38 +08:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-25 13:50:45 +02:00
2023-03-21 12:33:12 -05:00
2023-03-01 11:07:13 -08:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2022-07-28 10:27:38 +08:00
2023-01-09 11:49:28 +00:00
2023-01-25 13:50:33 +02:00
2023-03-30 08:06:36 -05:00
2023-03-01 15:35:21 +11:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-03-02 16:40:53 +01:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2022-07-28 10:27:38 +08:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-03-28 12:38:50 -06:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-03-14 11:42:11 +01:00
2023-01-09 11:49:28 +00:00
2023-03-02 16:40:53 +01:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-03-02 16:40:53 +01:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-04-05 10:52:18 +10:00
2023-04-05 10:52:18 +10:00
2023-03-31 13:26:56 +08:00
2023-01-09 11:49:28 +00:00
2023-03-10 12:33:12 -07:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-20 09:50:24 +08:00
2023-01-09 11:49:28 +00:00
2023-03-20 11:41:23 -05:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-03-14 13:11:45 -05:00
2023-01-09 11:49:28 +00:00
2023-02-13 12:39:45 +08:00
2022-07-28 10:27:38 +08:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-02-13 12:39:45 +08:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-03-08 15:53:53 +01:00
2023-01-20 09:50:24 +08:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-12 08:22:28 +08:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-02-20 10:31:02 +01:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-02-15 12:41:04 +11:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2022-07-28 10:27:38 +08:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-03-08 10:39:12 +10:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-02-21 11:52:04 -05:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-03-01 12:23:29 +08:00
2023-01-09 11:49:28 +00:00
2023-04-11 10:16:28 +01:00
2023-04-11 12:28:08 +10:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00
2023-01-09 11:49:28 +00:00