feat: Validate hash

Signed-off-by: Christopher Ng <chrng8@gmail.com>
nextcloud · Jun 28, 2024 · 99d49d4 · 99d49d4
1 parent 7f329da
commit 99d49d4
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/UserBackend.php b/lib/UserBackend.php
@@ -23,6 +23,7 @@
 
 namespace OCA\Guests;
 
+use InvalidArgumentException;
 use OC\Cache\CappedMemoryCache;
 use OCP\EventDispatcher\IEventDispatcher;
 use OCP\IDBConnection;
@@ -179,6 +180,9 @@ public function getPasswordHash(string $userId): ?string {
 	}
 
 	public function setPasswordHash(string $userId, string $passwordHash): bool {
+		if (!$this->hasher->validate($passwordHash)) {
+			throw new InvalidArgumentException();
+		}
 		$qb = $this->dbConn->getQueryBuilder();
 		$qb->update('guests_users')
 			->set('password', $qb->createNamedParameter($passwordHash))