[wp-trac] [WordPress Trac] #46794: wp_authenticate_email_password fails due to incorrect evaluation of $user object

[WordPress Trac]

#46794: wp_authenticate_email_password fails due to incorrect evaluation of $user
object
--------------------------+-----------------------------------------
 Reporter:  Csassaf       |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Users         |    Version:  5.1
 Severity:  blocker       |   Keywords:  has-screenshots needs-patch
  Focuses:                |
--------------------------+-----------------------------------------
 While testing an authentication method that uses wp_authenticate where I
 was passing in a correct email address and password combination that was
 failing, I traced the code through to the wp_authenticate_email_password
 method in wp_includes/user.php in wp 5.1.1.

 Line 251 executes wp_check_password with $password, $user->user_pass and
 $user->ID, however $user->user_pass does not exist in $user, rather it
 exists in $user->data->user_pass.

 See attachments for Xdebug code and local variables.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/46794>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform