Is checkSecurePassword broken?

[jz87]

I'm using getApi().checkSecurePassword to verify user passwords but let's say the password is 2, but I type in 4 as the password. checkSecurePassword returns true anyway. Is this a known issue?

For reference I'm using
(ISession)event.getParameter(SFSEventParam.SESSION)
to get the session info.

[Lapo]

We are not aware of any problem with checkSecurePassword, it has been working without problems so far.

Also your example is incorrect because the secure password must be used in the server side login handler in order to check the hashed password coming from the client side.

Make sure to check our tutorials, I am sure it will solve your problem:
http://docs2x.smartfoxserver.com/Develo ... ustomLogin

[heisemoshengren]

We are not aware of any problem with checkSecurePassword, it has been working without problems so far.

Also your example is incorrect because the secure password must be used in the server side login handler in order to check the hashed password coming from the client side.

Make sure to check our tutorials, I am sure it will solve your problem:
http://docs2x.smartfoxserver.com/Develo ... ustomLogin

getApi().checkSecurePassword(session, dbPassword, password);
all false?
always check failed!
password is ok!
'trace'output to console!
password same!
why?

[Bax]

Please read this post: http://forums.smartfoxserver.com/viewtopic.php?t=10918
(the forum search function can be very helpful )