John Blackbourn cc39c68706 Application Passwords: Correct the fallback behaviour for application passwords that don't use a generic hash. ...

Application passwords that aren't hashed using BLAKE2b should be checked using wp_check_password() rather than assuming they were hashed with phpass. This provides full back compat support for application passwords that were created via an overridden wp_hash_password() function that uses an alternative hashing algorithm.

Reviewed by audrasjb.
Merges [60123] into the 6.8 branch.

Props snicco, debarghyabanerjee, peterwilsoncc, jorbin, johnbillion.

Fixes #63203

Built from https://develop.svn.wordpress.org/branches/6.8@60125


git-svn-id: http://core.svn.wordpress.org/branches/6.8@59461 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2025-04-03 14:38:27 +00:00

17 KiB

Raw Blame History

View Raw