Merge pull request #17204 from nextcloud/backport/17201/stable17

[stable17] Use the actual password to update the tokens

Author: rullzer

lib/private/Authentication/Login/CreateSessionTokenCommand.php

@@ -59,7 +59,7 @@ public function process(LoginData $loginData): LoginResult {
 		);
 		$this->userSession->updateTokens(
 			$loginData->getUser()->getUID(),
-			$loginData->getUsername()
+			$loginData->getPassword()
 		);
 
 		return $this->processNextOrFinishSuccessfully($loginData);

tests/lib/Authentication/Login/CreateSessionTokenCommandTest.php

@@ -76,7 +76,7 @@ public function testProcess() {
 			->method('updateTokens')
 			->with(
 				$this->username,
-				$this->username
+				$this->password
 			);
 
 		$result = $this->cmd->process($data);
@@ -109,7 +109,7 @@ public function testProcessDoNotRemember() {
 			->method('updateTokens')
 			->with(
 				$this->username,
-				$this->username
+				$this->password
 			);
 
 		$result = $this->cmd->process($data);