OrchardCMS / Orchard

Orchard is a free, open source, community-focused Content Management System built on the ASP.NET MVC platform.
https://orchardproject.net
BSD 3-Clause "New" or "Revised" License
2.37k stars 1.12k forks source link

BUG: migrating password hashes to default algorithm #8671

Closed MatteoPiovanelli-Laser closed 1 year ago

MatteoPiovanelli-Laser commented 1 year ago

https://github.com/OrchardCMS/Orchard/blob/ff70011b695395a0639748afc2c1032468233bae/src/Orchard.Web/Modules/Orchard.Users/Services/PasswordService.cs#L56

When the membership service was refactored, we migration to the new hashing algorithms on validation (i.e. logon or password change) was effectively removed, because the new password is only "stored" in the context, and not persisted.