[Config] Add password algorithm selector

[skarya22]

Brief summary of changes

• In CCNA, we use PASSWORD_ARGON2I rather than PASSWORD_DEFAULT
• This PR adds an option to change which php password algorithm to use so that projects do not need an override in-order to change it.
• It defaults to PASSWORD_DEFAULT which is what it was set to before.
  

Testing instructions (if applicable)

1. Try changing the password hash in config, and then setting a new password.
2. See that you can still login

[driusan]

Could you use https://www.php.net/manual/en/function.password-algos.php (and add a "Default" option)

I'm not really sure what the point of having the blank option here is.

[skarya22]

That function doesn't output usable strings for the password_hash function unfortunately. It gives values such as: '2y','argon2i, 'argon2id', but password_hash uses, 'PASSWORD_DEFAULT','PASSWORD_BCRYPT', 'PASSWORD_ARGON2I', and 'PASSWORD_ARGON2ID'

I will remove the blank option though. It was just there in-case somehow a non-usable value was saved so it doesn't show PASSWORD_DEFAULT instead. But it probably just makes it confusing

[driusan]

PASSWORD_DEFAULT/PASSWORD_BCRYPT/etc are just built in constants with those values.

$ php -a
Interactive shell

php > print PASSWORD_DEFAULT;
2y
php > print PASSWORD_ARGON2I;
argon2i
php > print_r(password_algos());
Array
(
    [0] => 2y
    [1] => argon2i
    [2] => argon2id
)
php > print password_hash('test', 'argon2i');
$argon2i$v=19$m=65536,t=4,p=1$WlBObVNleHU0RHVCMG9DTw$3jZ/HN8N4r6YERoJJbMGup/d8rebjUZ72lYZcbTsjno
php > 

[skarya22]

oh sweet, thanks!

[skarya22]

@kongtiaowang I can't seem to get the tests to work in the Password class due to the addition of a getSetting from the Config table in Password. How can I setup the mock table in the test to have a value for Config?