function PasswordVerifyTest::testLongPassword

Verifies that passwords longer than 512 bytes are not hashed.

@covers ::crypt

@dataProvider providerLongPasswords

File

core/modules/phpass/tests/src/Unit/PasswordVerifyTest.php, line 124

Class

PasswordVerifyTest

Unit tests for password hashing API.

Namespace

Code

public function testLongPassword($password, $allowed) : void {
  // cspell:disable
  $bogusHash = '$S$5TOxWPdvJRs0P/xZBdrrPlGgzViOS0drHu3jaIjitesfttrp18bk';
  // cspell:enable
  $passwordService = new PhpassHashedPassword(new PhpPassword());
  if ($allowed) {
    $hash = $passwordService->hash($password);
    $this->assertNotFalse($hash);
    $result = $passwordService->check($password, $hash);
    $this->assertTrue($result);
  }
  else {
    $result = $passwordService->check($password, $bogusHash);
    $this->assertFalse($result);
  }
}