laravel / framework

The Laravel Framework.
https://laravel.com
MIT License
32.64k stars 11.04k forks source link

[11.x] hash the token going into the cache #53561

Closed browner12 closed 3 days ago

browner12 commented 3 days ago

this is a bugfix for the new password reset cache driver. when translating from the DatabaseTokenRepository, I forgot to mimic the behavior of hashing the token going into storage.

thanks to @christophrumpel for finding this.

browner12 commented 3 days ago

relevant line in the DatabaseTokenRepository. https://github.com/laravel/framework/blob/11.x/src/Illuminate/Auth/Passwords/DatabaseTokenRepository.php#L120