From 9e087c7c8efefb84fedc650ef28959540a5c64dc Mon Sep 17 00:00:00 2001
From: Tomas Cohen Arazi <tomascohen@theke.io>
Date: Thu, 9 Sep 2021 08:51:02 -0300
Subject: [PATCH] Bug 28772: Do not hash secrets twice

Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Wainui Witika-Park <wainuiwitikapark@catalyst.net.nz>
---
 installer/data/mysql/atomicupdate/bug_28772_api_keys.pl | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/installer/data/mysql/atomicupdate/bug_28772_api_keys.pl b/installer/data/mysql/atomicupdate/bug_28772_api_keys.pl
index 1e38409018..2baf5bf788 100755
--- a/installer/data/mysql/atomicupdate/bug_28772_api_keys.pl
+++ b/installer/data/mysql/atomicupdate/bug_28772_api_keys.pl
@@ -25,8 +25,10 @@ return {
         });
 
         foreach my $api_key (@$results) {
-            my $digest = Koha::AuthUtils::hash_password( $api_key->{secret} );
-            $sth->execute( $digest, $api_key->{client_id} );
+            unless ( $api_key->{secret} =~ m/^\$2a\$08\$/ ) {
+                my $digest = Koha::AuthUtils::hash_password( $api_key->{secret} );
+                $sth->execute( $digest, $api_key->{client_id} );
+            }
         }
     },
 }
-- 
2.39.5