Allow updating migrated users without supplying a passworderdgeist-modernize-auth

password_required? treated a blank crypted_password as "needs a
password", but after bcrypt migration crypted_password is nil by
design -- every subsequent save of a migrated or new user failed
validation. The predicate now requires a password only when both
the legacy and the bcrypt credential are absent, or when one is
actually being set.

1 files changed, 1 insertions, 1 deletions

diff --git a/lib/authentication.rb b/lib/authentication.rb
index 56df391..4d8a5ae 100644
--- a/lib/authentication.rb
+++ b/lib/authentication.rb
@@ -98,7 +98,7 @@ module Authentication
       end
 
       def password_required?
-        crypted_password.blank? || !password.blank?
+        (crypted_password.blank? && password_digest.blank?) || !password.blank?
       end
     end # instance methods
   end