From 725c7e566f7e5b61581ad9c01a99b74b2cf1c7cc Mon Sep 17 00:00:00 2001
From: Geoff Appleby <14942-gapple@users.noreply.drupalcode.org>
Date: Tue, 23 May 2023 15:52:43 +0000
Subject: [PATCH] Issue #3334308: needsRehash always checks against
 PASSWORD_DEFAULT

---
 src/Password/PhpPassword.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Password/PhpPassword.php b/src/Password/PhpPassword.php
index bad2837..d3b5351 100644
--- a/src/Password/PhpPassword.php
+++ b/src/Password/PhpPassword.php
@@ -81,7 +81,7 @@ public function needsRehash($hash) {
     // - The parameters of hashing engine were changed. For example the
     //   parameter 'password_hash_cost' (the hashing cost) has been increased in
     //   core.services.yml.
-    return password_needs_rehash($hash, PASSWORD_DEFAULT, $this->getOptions());
+    return password_needs_rehash($hash, $this->algorithm, $this->getOptions());
   }
 
   /**
-- 
GitLab