From a3b59ef0419b52f8f444f2036ddd95bee790a675 Mon Sep 17 00:00:00 2001 From: Uncled1023 Date: Mon, 28 Jan 2019 17:58:02 -0800 Subject: [PATCH] Fixed legacy password checks. --- IdentityServer/Security/PasswordHasher.cs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/IdentityServer/Security/PasswordHasher.cs b/IdentityServer/Security/PasswordHasher.cs index 203f4e1..ddea7c0 100644 --- a/IdentityServer/Security/PasswordHasher.cs +++ b/IdentityServer/Security/PasswordHasher.cs @@ -35,7 +35,7 @@ namespace Teknik.IdentityServer.Security // Test legacy password hashes #region Legacy Checks - byte[] hashBytes = SHA384.Hash(user.UserName, providedPassword); + byte[] hashBytes = SHA384.Hash(user.UserName.ToLower(), providedPassword); string hash = hashBytes.ToHex(); if (hashedPassword == hash) {