Rails Devise: Don't check password salt when authenticating -
i'm migrating php site on rails using devise authentication method. old site uses md5(salt + password) authenticate users wrote custom devise encryptor such:
module devise module encryptors class md5 < base def self.digest(password, stretches, pepper) digest::md5.hexdigest(password + 'the_salt_value') end end end end
when create new user on new site password "password", hashed password matches user on old site password "password", good. however, values in password_salt column, purpose i'm unclear on, different , user on old site can't login "password" when migrate database over.
what's best way deal problem? there way make devise compare values in encrypted_password column when authenticating?
Comments
Post a Comment