benedmunds / CodeIgniter-Ion-Auth

Simple and Lightweight Auth System for CodeIgniter
http://benedmunds.com/ion_auth/
MIT License
2.34k stars 1.14k forks source link

Argon2id support #1492

Closed jamieburchell closed 3 years ago

jamieburchell commented 3 years ago

As per https://wiki.php.net/rfc/argon2_password_hash_enhancements the recommended default Argon2 implementation is now Argon2id. This library only supports Argon2i.

Argon2id may not be available to you however, so this would likely need to be another config option. The generally recommended way to use the password_hash method however is with the PASSWORD_DEFAULT constant, so I'm thinking, would you also support a "default" setting which uses this constant?

benedmunds commented 3 years ago

Thanks for reporting this.

Can you test this out to see if it solves this issue for you?

https://github.com/benedmunds/CodeIgniter-Ion-Auth/pull/1494

benedmunds commented 3 years ago

Closing due to inactivity. Feel free to re-open if this is still an issue.