PublickKeyTokenProvider: Fix password update routine with password hash

[marcelklehr]

fixes #33757

[ldidry]

@marcelklehr Do you think this PR could be tested on production server? We have like 600GiB of WAL every 2 days (for a DB that weights less than 200GiB), it puts a real burden on our backup server.

[marcelklehr]

Let's wait till this is merged @ldidry

[ldidry]

Ok, thx. :slightly_smiling_face:

[icewind1991]

follow up from https://github.com/nextcloud/server/pull/33485

[szaimen]

/rebase

[juliusknorr]

Cypress failure looks related (500 error on the login)

[juliusknorr]

Maybe naive, but couldn't we compare the value of decrypted password ?

We cannot decrypt all tokens of a user to update them as we only got the user password when the update is called, not the actual cipher to decrypt the tokens (e.g. the app passwords).

[marcelklehr]

For some reason the migration isn't executed before the cypress tests run. Help is appreciated.

[artonge]

For some reason the migration isn't executed before the cypress tests run. Help is appreciated.

I had the same issue in another PR. Let me see if I can come up with a generic solution

[artonge]

https://github.com/nextcloud/server/pull/35889 should fix the issue.

[marcelklehr]

Should be good to merge now

[juliusknorr]

Pushed another commit to bump the version and trigger the db upgrade on existing setups.

[juliusknorr]

Failure unrelated

[nickvergessen]

This basically breaks Talk integration tests. On each login the password column as well as password_hash of oc_authtokens is changed, for all entries, although the user password never changes (admin:admin).

[ChristophWurst]

/backport to stable25