Migrate current password hashing to Argon2id

2026-02-18 21:06:22 +01:00
parent a130cba41a
commit e55a1b01f4
9 changed files with 46 additions and 15 deletions
--- a/GameList.Tests/HelperTests.cs
+++ b/GameList.Tests/HelperTests.cs
@@ -27,6 +27,7 @@ public class HelperTests
        var (legacyHash, legacySalt) = PasswordHasher.HashPassword("secret", PasswordHasher.LegacyVersion);
        Assert.True(PasswordHasher.Verify("secret", legacyHash, legacySalt, PasswordHasher.LegacyVersion, out var legacyNeedsRehash));
        Assert.True(legacyNeedsRehash);
+        Assert.False(PasswordHasher.Verify("secret", hash, salt, 999, out _));

        Assert.False(PasswordHasher.Verify("other", hash, salt));
        Assert.Throws<ArgumentException>(() => PasswordHasher.HashPassword(""));