Remove salt from bcrypt password, because it's useless

This commit is contained in:
2024-04-23 18:30:19 +02:00
parent baad757371
commit df3068728a
4 changed files with 8 additions and 15 deletions

View File

@ -269,7 +269,7 @@ func (server *TimerServer) handlePostLogin(w http.ResponseWriter, r *http.Reques
return
}
err := bcrypt.CompareHashAndPassword(user.Password, []byte(user.Salt+userPass))
err := bcrypt.CompareHashAndPassword(user.Password, []byte(userPass))
if err != nil {
w.WriteHeader(http.StatusBadRequest)
view.LoginFormError(nil, "Incorrect credentials").Render(context.Background(), w)