function PasswordVerifyTest::testPasswordCheckSupported

Tests that check() verifies passwords if hash settings are supported.

@covers ::check
@covers ::crypt
@covers ::getCountLog2
@covers ::enforceLog2Boundaries
@covers ::base64Encode

File

core/modules/phpass/tests/src/Unit/PasswordVerifyTest.php, line 80

Class

PasswordVerifyTest

Unit tests for password hashing API.

Namespace

Code

public function testPasswordCheckSupported() : void {
  $validPassword = 'valid password';
  // cspell:disable
  $passwordHash = '$S$5TOxWPdvJRs0P/xZBdrrPlGgzViOS0drHu3jaIjitesfttrp18bk';
  $passwordLayered = 'U$S$5vNHDQyLqCTvsYBLWBUWXJWhA0m3DTpBh04acFEOGB.bKBclhKgo';
  // cspell:enable
  $invalidPassword = 'invalid password';
  $corePassword = $this->prophesize(PasswordInterface::class);
  $corePassword->check()
    ->shouldNotBeCalled();
  $passwordService = new PhpassHashedPassword($corePassword->reveal());
  $result = $passwordService->check($validPassword, $passwordHash);
  $this->assertTrue($result, 'Accepts valid passwords created prior to 10.1.x');
  $result = $passwordService->check($invalidPassword, $passwordHash);
  $this->assertFalse($result, 'Rejects invalid passwords created prior to 10.1.x');
  $result = $passwordService->check($validPassword, $passwordLayered);
  $this->assertTrue($result, 'Accepts valid passwords migrated from sites running 6.x');
  $result = $passwordService->check($invalidPassword, $passwordLayered);
  $this->assertFalse($result, 'Rejects invalid passwords migrated from sites running 6.x');
}