Cannot log into Adapt Authoring Tool despite correct credentials (password hashing issue suspected)

[Bertbeere]

Expected Behaviour: I should be able to log in to the Adapt Authoring Tool using my valid admin account.

Actual Behaviour:

Login always fails with the message:
"Invalid email address or password"

• Even after manually updating the password in MongoDB, the tool does not accept it.
• Rehashing the password using bcrypt and updating the user record still results in the same login error.
• Everything else (server start, MongoDB connection, ports) works without errors.

Steps to Reproduce:

• Start MongoDB service:
• systemctl start mongod
• Start the Adapt Authoring Tool server:
  cd ~/adapt_authoring
  node server
• Try to log in at http://localhost:5000 using the admin user
• Login fails with Invalid email address or password.
• Update the user's password in MongoDB manually (plaintext or bcrypt hash), restart server — login still fails.

Versions:

• Authoring Tool Version: 0.11.5
• Framework Version: 5.53.5
• MongoDB Version: 6.0.26
• Operating System: Ubuntu (on Lenovo ThinkPad Yoga 370)
• Browser: Firefox and Chrome/Incognito (both tested)

[davetaz]

This is most likely to do with Adapt Authoring tool now being unsupported. I have done a few patches to 0.11.5 which are available here to keep it running. Please note these are not guaranteed. You might want to look specifically at the security section which includes the mongo 6 update.