Fix password verify logic in loginJwtDriver.php to use raw DB ciphertext
This commit is contained in:
@@ -84,10 +84,10 @@ try {
|
||||
// ── المحاولة الثانية: طريقة قديمة (قيم مشفرة) للتوافق ─
|
||||
$oldParts = [
|
||||
$driver['id'],
|
||||
$encryptionHelper->encryptData(trim($decPhone)),
|
||||
$driver['phone'],
|
||||
];
|
||||
if (!empty($decNat)) {
|
||||
$oldParts[] = $encryptionHelper->encryptData(trim($decNat));
|
||||
if (!empty($driver['national_number'])) {
|
||||
$oldParts[] = $driver['national_number'];
|
||||
}
|
||||
$oldString = implode('|', $oldParts);
|
||||
$oldSecret = hash_hmac('sha256', $oldString, $pepper, true);
|
||||
|
||||
Reference in New Issue
Block a user