From 92ff8b7c4d25782d8d192def1eca804e3473c1d7 Mon Sep 17 00:00:00 2001 From: Petr Ilin Date: Sun, 6 Feb 2022 21:30:33 +0300 Subject: More migration hash algorithms --- src/main/java/net/elytrium/limboauth/handler/AuthSessionHandler.java | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'src/main/java/net/elytrium/limboauth/handler') diff --git a/src/main/java/net/elytrium/limboauth/handler/AuthSessionHandler.java b/src/main/java/net/elytrium/limboauth/handler/AuthSessionHandler.java index 9619b2d..88f393d 100644 --- a/src/main/java/net/elytrium/limboauth/handler/AuthSessionHandler.java +++ b/src/main/java/net/elytrium/limboauth/handler/AuthSessionHandler.java @@ -212,7 +212,10 @@ public class AuthSessionHandler implements LimboSessionHandler { } public static boolean checkPassword(String password, RegisteredPlayer player, Dao playerDao) { - boolean isCorrect = BCrypt.verifyer().verify(password.getBytes(StandardCharsets.UTF_8), player.getHash().getBytes(StandardCharsets.UTF_8)).verified; + boolean isCorrect = BCrypt.verifyer().verify( + password.getBytes(StandardCharsets.UTF_8), + player.getHash().replace("BCRYPT$", "$2a$").getBytes(StandardCharsets.UTF_8) + ).verified; if (!isCorrect && !Settings.IMP.MAIN.MIGRATION_HASH.isEmpty()) { isCorrect = MigrationHash.valueOf(Settings.IMP.MAIN.MIGRATION_HASH).checkPassword(player.getHash(), password); -- cgit