Argon2ID authentication
Peter van Es <[email protected]> Wed, 22 Apr 2026 10:17:59 +0200
| Newsgroups | gmane.comp.web.wiki.pmwiki.user |
|---|---|
| Message-ID | <[email protected]> |
--===============0082749422365847362== Content-Type: multipart/alternative; boundary="Apple-Mail=_CB33D247-F3B5-4C3A-ADBF-739566AD8828" --Apple-Mail=_CB33D247-F3B5-4C3A-ADBF-739566AD8828 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I am setting up a new PMWiki site.=20 I have user records in a database table on the same host. It contains = username=E2=80=99s and passwords which are Argon2ID salted hashes. They = can be verified using the php function: = https://www.php.net/manual/en/function.password-verify.php which just needs the hash, and the password entered by the user. I=E2=80=99m looking into using recepies: 1. standard authuser.php, which is where the password is checked, if = I=E2=80=99m not mistaken 2. AuthUserDB which looks overly complicated given that all user = management and password resets are done on another system 3. and the adodb-connect.php script However, most of these do not appear to have been updated since 2007=E2=80= =A6=20 Should I simplify things and just build my own customised database = layer, and modify authuser.php to use the password verify function? Additionally I want to add groups to the user so that I have more = fine-grained access control=E2=80=A6 Thanks in advance for your guidance Peter van Es= --Apple-Mail=_CB33D247-F3B5-4C3A-ADBF-739566AD8828 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html><head><meta http-equiv=3D"content-type" content=3D"text/html; = charset=3Dutf-8"></head><body style=3D"overflow-wrap: break-word; = -webkit-nbsp-mode: space; line-break: after-white-space;"><br>I am = setting up a new PMWiki site. <div><br></div><div>I have user = records in a database table on the same host. It contains username=E2=80=99= s and passwords which are Argon2ID salted hashes. They can be verified = using the php function: <a = href=3D"https://www.php.net/manual/en/function.password-verify.php">https:= //www.php.net/manual/en/function.password-verify.php</a></div><div>which = just needs the hash, and the password entered by the = user.</div><div><br></div><div>I=E2=80=99m looking into using = recepies:</div><div><br></div><div>1. standard authuser.php, which is = where the password is checked, if I=E2=80=99m not mistaken</div><div>2. = AuthUserDB which looks overly complicated given that all user management = and password resets are done on another system</div><div>3. and the = adodb-connect.php script</div><div><br></div><div>However, most of these = do not appear to have been updated since = 2007=E2=80=A6 </div><div><br></div><div>Should I simplify things = and just build my own customised database layer, and modify authuser.php = to use the password verify function?</div><div>Additionally I want to = add groups to the user so that I have more fine-grained access = control=E2=80=A6</div><div><br></div><div>Thanks in advance for your = guidance</div><div><br></div><div>Peter van Es</div></body></html>= --Apple-Mail=_CB33D247-F3B5-4C3A-ADBF-739566AD8828-- --===============0082749422365847362== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ pmwiki-users mailing list [email protected] http://www.pmichaud.com/mailman/listinfo/pmwiki-users --===============0082749422365847362==--