function PhpPasswordTest::testPasswordRehashing

Tests password rehashing.

@covers ::hash
@covers ::check
@covers ::needsRehash

File

core/tests/Drupal/Tests/Core/Password/PhpPasswordTest.php, line 73

Class

PhpPasswordTest

Unit tests for password hashing API.

Namespace

Code

public function testPasswordRehashing() : void {
  // Increment the cost by one.
  $strongHasher = new PhpPassword(PASSWORD_BCRYPT, [
    'cost' => 6,
  ]);
  $this->assertTrue($strongHasher->needsRehash($this->passwordHash), 'Needs a new hash after incrementing the cost option.');
  // Re-hash the password.
  $rehashedPassword = $strongHasher->hash($this->password);
  $this->assertNotEquals($rehashedPassword, $this->passwordHash, 'Password hash changed again.');
  // Now the hash should be OK.
  $this->assertFalse($strongHasher->needsRehash($rehashedPassword), 'Re-hashed password does not need a new hash.');
  $this->assertTrue($strongHasher->check($this->password, $rehashedPassword), 'Password check succeeds with re-hashed password.');
  $this->assertTrue($this->passwordHasher
    ->check($this->password, $rehashedPassword), 'Password check succeeds with re-hashed password with original hasher.');
}