function PasswordVerifyTest::testLongPassword

Verifies that passwords longer than 512 bytes are not hashed.

@covers ::crypt

@dataProvider providerLongPasswords

File

core/modules/phpass/tests/src/Unit/PasswordVerifyTest.php, line 124

Class

PasswordVerifyTest

Unit tests for password hashing API.

Namespace

Code

public function testLongPassword($password, $allowed) : void {
    // cspell:disable
    $bogusHash = '$S$5TOxWPdvJRs0P/xZBdrrPlGgzViOS0drHu3jaIjitesfttrp18bk';
    // cspell:enable
    $passwordService = new PhpassHashedPassword(new PhpPassword());
    if ($allowed) {
        $hash = $passwordService->hash($password);
        $this->assertNotFalse($hash);
        $result = $passwordService->check($password, $hash);
        $this->assertTrue($result);
    }
    else {
        $result = $passwordService->check($password, $bogusHash);
        $this->assertFalse($result);
    }
}