Closed
Description
Problem:
If there is a problem with the password/hash combination, we don't surface that to the user.
Solution:
Account for the following scenarios:
- bad hash — password and hash don't match
- unable to hash — invalid hash (like missing "$"), right?
- ? diff hashing algorithm — expected hash from sha256 but got argon2?