Merge pull request #1051 from CakeDC/issue/rehash-custom-password-field

Fix issue with password rehash with a custom password field
CakeDC · Sep 21, 2023 · b81c51d · b81c51d
2 parents 0d796dc + afb616c
commit b81c51d
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/Controller/Component/LoginComponent.php b/src/Controller/Component/LoginComponent.php
@@ -198,8 +198,9 @@ protected function handlePasswordRehash($service, $user, \Cake\Http\ServerReques
             if (!$checker || method_exists($checker, 'needsPasswordRehash') && !$checker->needsPasswordRehash()) {
                 continue;
             }
-            $password = $request->getData('password');
-            $user->set('password', $password);
+            $passwordField = $checker->getConfig('fields.password', 'password');
+            $password = $request->getData($passwordField);
+            $user->set($passwordField, $password);
             $user->setDirty('modified');
             $this->getController()->getUsersTable()->save($user);
             break;