Merge pull request #4146 from sylvaindumont/patch-1

handle $2b$ in hashed password check
strongloop · Feb 25, 2019 · c8a31e2 · c8a31e2
2 parents 1e33ec5 + 4226da5
commit c8a31e2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/common/models/user.js b/common/models/user.js
@@ -1089,7 +1089,7 @@ module.exports = function(User) {
       if (typeof plain !== 'string') {
         return;
       }
-      if (plain.indexOf('$2a$') === 0 && plain.length === 60) {
+      if ((plain.indexOf('$2a$') === 0 || plain.indexOf('$2b$') === 0) && plain.length === 60) {
         // The password is already hashed. It can be the case
         // when the instance is loaded from DB
         this.$password = plain;