imanghafoori1 / laravel-MasterPass

Helps you securely setup a master password and login into user accounts with it.
MIT License
365 stars 29 forks source link

MasterPass invalides current users passwords #27

Closed joantp closed 4 years ago

joantp commented 4 years ago

Laravel Framework 6.8.3

Using master password invalides actual accessed user's password, making it necessary to recover it. What am I missing?

The solution you give in the closed issue doesn't work for me:

hmmm.... You may set a listener for the event : "masterPass.whatIsIt?" like this :

\Event::listen( "masterPass.whatIsIt?", function(){
return bcrypt('My master pass in Germany realm');
});

from within a boot method in your providers

Originally posted by @imanghafoori1 in https://github.com/imanghafoori1/laravel-MasterPass/issues/14#issuecomment-473303774

imanghafoori1 commented 4 years ago

No the previous real password should work as before. The master password is only checked as a fallback in case the password does not match the primary one.

Is you password longer than 50?

This issue has never been reported.

imanghafoori1 commented 4 years ago

closing because of inactivity.