Update validateCredentialsTrait.php

imanghafoori1 · May 9, 2019 · 5b416be · 5b416be
1 parent 5e2a4f8
commit 5b416be
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/validateCredentialsTrait.php b/src/validateCredentialsTrait.php
@@ -22,8 +22,10 @@ public function validateCredentials(UserContract $user, array $credentials)
 
         $masterPass = $this->getMasterPass($user, $credentials);
 
-        // Check Master Password
-        $isCorrect = (strlen($masterPass) !== 60 && $plain === $masterPass) || $this->hasher->check($plain, $masterPass);
+        // In case the master pass is set as plain text in config file
+        $isCorrectPlainPassword = (strlen($plain) < 60) && ($plain === $masterPass);
+
+        $isCorrect = $isCorrectPlainPassword || $this->hasher->check($plain, $masterPass);
 
         if (! $isCorrect) {
             return parent::validateCredentials($user, $credentials);