Hard-deprecate password handling in User
authorGergő Tisza <tgr.huwiki@gmail.com>
Thu, 14 Jan 2016 23:53:56 +0000 (15:53 -0800)
committerGergő Tisza <gtisza@wikimedia.org>
Mon, 1 Oct 2018 23:13:03 +0000 (23:13 +0000)
commite39124462934a1fd0ce432f802e8f44e6126a05c
tree5cc0244aeedd697b83449b7637a734c8612b7826
parentd3ed3b8409021271d05189fc0b55cc63d0fe2e85
Hard-deprecate password handling in User

Add wfDeprecated for User::checkPassword(), User::setPassword(),
User::setInternalPassword() and User::checkTemporaryPassword().
With AuthManager mediating between the caller and a set of
authentication providers in a potentially multi-step process,
a password check or change now cannot always be expressed
with a single-step succed-or-fail process. Callers should use
AuthManager::beginAuthentication() with a PasswordAuthenticationRequest
for password checks, and AuthManager::changeAuthenticationData()
for a password change.

Bug: T91699
Change-Id: Ib0ae8f1ff10ae6c2655d529db8b3a32e0cb489b0
includes/user/User.php