From 3321adbe640d846913be19f82b5a51cba8c0642e Mon Sep 17 00:00:00 2001 From: Hao Kung Date: Thu, 2 Jul 2015 12:22:21 -0700 Subject: [PATCH] Add test verifying passwords are salted --- .../UserStoreTest.cs | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/test/Microsoft.AspNet.Identity.EntityFramework.Test/UserStoreTest.cs b/test/Microsoft.AspNet.Identity.EntityFramework.Test/UserStoreTest.cs index 37f8753de9..799e141848 100644 --- a/test/Microsoft.AspNet.Identity.EntityFramework.Test/UserStoreTest.cs +++ b/test/Microsoft.AspNet.Identity.EntityFramework.Test/UserStoreTest.cs @@ -198,6 +198,18 @@ namespace Microsoft.AspNet.Identity.EntityFramework.Test IdentityResultAssert.IsSuccess(await manager.DeleteAsync(user)); } + [Fact] + public async Task TwoUsersSamePasswordDifferentHash() + { + var manager = CreateManager(); + var userA = new IdentityUser(Guid.NewGuid().ToString()); + IdentityResultAssert.IsSuccess(await manager.CreateAsync(userA, "password")); + var userB = new IdentityUser(Guid.NewGuid().ToString()); + IdentityResultAssert.IsSuccess(await manager.CreateAsync(userB, "password")); + + Assert.NotEqual(userA.PasswordHash, userB.PasswordHash); + } + [Fact] public async Task AddUserToUnknownRoleFails() {