Function TestUserAuthenticateWithOldPasswordHash

auth/user_test.go:350–369

Must not authenticate if old hash is present. Password must be reset to use new (bcrypt) password hash.

(t *testing.T)

// Must not authenticate if old hash is present.
// Password must be reset to use new (bcrypt) password hash.
func TestUserAuthenticateWithOldPasswordHash(t *testing.T) {
	base.SetUpTestLogging(t, base.LevelDebug, base.KeyAuth)
	const (
		username = "alice"
		password = "hunter2"
	)
	ctx := base.TestCtx(t)
	testBucket := base.GetTestBucket(t)
	defer testBucket.Close(ctx)
	dataStore := testBucket.GetSingleDataStore()
	auth := NewTestAuthenticator(t, dataStore, nil, DefaultAuthenticatorOptions(ctx))

	user, err := auth.NewUser(username, password, base.Set{})
	assert.NoError(t, err)
	assert.NotNil(t, user)

	passwordHash := user.(*userImpl).PasswordHash_
	user.(*userImpl).OldPasswordHash_ = passwordHash
	assert.False(t, user.Authenticate(password))
}

// Must not authenticate with bad password hash
func TestUserAuthenticateWithBadPasswordHash(t *testing.T) {