From 0af2f908e776fff41ce09f22b746b373e3d09511 Mon Sep 17 00:00:00 2001 From: mickael-hc <86245626+mickael-hc@users.noreply.github.com> Date: Mon, 21 Jul 2025 18:52:48 +0000 Subject: [PATCH] backport of commit 1d60673802a1333711da4343278cbe92640212a7 --- builtin/credential/userpass/path_login.go | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/builtin/credential/userpass/path_login.go b/builtin/credential/userpass/path_login.go index 4018b19608a..29f3c7074a3 100644 --- a/builtin/credential/userpass/path_login.go +++ b/builtin/credential/userpass/path_login.go @@ -89,11 +89,7 @@ func (b *backend) pathLogin(ctx context.Context, req *logical.Request, d *framew } else { // This is still acceptable as bcrypt will still make sure it takes // a long time, it's just nicer to be random if possible - var err error - userPassword, err = bcrypt.GenerateFromPassword([]byte("dummy"), bcrypt.DefaultCost) - if err != nil { - return logical.ErrorResponse("invalid username or password"), nil - } + userPassword = []byte("$2a$10$/rzAjBPX3APZv8DesvsjB.OKdMif2xomluDfaxQ.OZcF06EuECsVG") } // Check for a password match. Check for a hash collision for Vault 0.2+,