support password conversion, on exporter basis

[akhoury]

per https://community.nodebb.org/topic/2688/after-migration-passwords/13

[andreapernici]

I confirm that passwords are lost during the import.

[Miaourt]

Little re-up of the issue c:

[akhoury]

it's going to be a little while. sorry.

[bdharrington7]

@akhoury I'm a little fuzzy on the details about how vanilla hashes the passwords, but even if vanilla (or any other forum) actually used the same encryption algorithm like md5, the fact that nodebb runs the password through bcrypt a few times makes that approach useless. For the password import to even work, the old forum would have to have the same salt, and run the password through bcrypt the same number of times as nodebb.

[bdharrington7]

Sorry just caught up on the referenced thread. Imo the proposed solution is more work than is worth it. Plus, this would automatically exclude any proprietary closed source forum software. Having users reset their password is not a huge ask, especially in these times. (Plus an opportunity to have them make a better one)

[akhoury]

I totally agree