Appwrite/appwrite
1
0
Fork 0
mirror of https://github.com/appwrite/appwrite.git synced 2026-05-26 13:51:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: password verify

Browse Source
This commit is contained in:
Damodar Lohani
2022-12-18 06:28:19 +00:00
parent 0eae73e7b8
commit 6612e6edf0
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/controllers/api/users.php
+7 -4
View File
@@ -809,11 +809,14 @@ App::patch('/v1/users/:userId/password')
$history = [];
if($historyLimit > 0) {
$history = $user->getAttribute('passwordHistory', []);
if(in_array($newPassword, $history)) {
throw new Exception(Exception::USER_PASSWORD_RECENTLY_USED, 'The password was recently used', 409);
foreach($history as $hash) {
if(Auth::passwordVerify($password, $hash, $user->getAttribute('hash'), $user->getAttribute('hashOptions')))
{
throw new Exception(Exception::USER_PASSWORD_RECENTLY_USED, 'The password was recently used', 409);
}
}
$history[] = $newPassword;
while(count($history) > $historyLimit) {
array_pop($history);