bn8/ldapsaisie
1
0
Fork 0
mirror of https://gitlab.easter-eggs.com/ee/ldapsaisie.git synced 2024-12-22 00:13:51 +01:00
Code Issues Projects Releases Wiki Activity

Add argon2 passwords support

Browse source
This commit is contained in:
Benjamin Renard 2022-04-19 11:53:39 +02:00
parent f5d21ec93c
commit 457995bc22
2 changed files with 23 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
doc/conf/LSattribute/LSattr_ldap/LSattr_ldap_password.docbook
View file

@ -25,6 +25,8 @@
<para>Nom du type d'encodage du mot de passe utilisé. Les types d'encodages
supportés sont les suivants :
<itemizedlist>
<listitem><simpara><literal>argon2</literal> (ou <literal>argon2i</literal>, PHP >= 7.2)</simpara></listitem>
<listitem><simpara><literal>argon2id</literal> (PHP >= 7.3)</simpara></listitem>
<listitem><simpara><literal>md5crypt</literal></simpara></listitem>
<listitem><simpara><literal>crypt</literal></simpara></listitem>
<listitem><simpara><literal>ext_des</literal></simpara></listitem>

21
src/includes/class/class.LSattr_ldap_password.php
View file

@ -208,6 +208,23 @@ class LSattr_ldap_password extends LSattr_ldap {
return '{CRYPT}'.crypt($clearPassword,'$1$'.$salt.'$');
}
break;
case 'argon2':
case 'argon2i':
if( ! defined( 'PASSWORD_ARGON2I' ) ) {
LSerror :: addErrorCode('LSattr_ldap_password_01', 'argon2');
}
else {
return '{ARGON2}'.password_hash($clearPassword, PASSWORD_ARGON2I);
}
break;
case 'argon2id':
if( ! defined( 'PASSWORD_ARGON2ID' ) ) {
LSerror :: addErrorCode('LSattr_ldap_password_01', 'argon2id');
}
else {
return '{ARGON2}'.password_hash($clearPassword, PASSWORD_ARGON2ID);
}
break;
case 'clear':
return $clearPassword;
break;
@ -310,6 +327,10 @@ class LSattr_ldap_password extends LSattr_ldap {
break;
# Argon2 passwords
case 'argon2':
return password_verify($clearPassword, $hashedPasswordData);
# No crypt is given
default:
# Assume is a plaintext password