<?php
namespace Psso\AuthProvider;
use Psso\{AuthProvider, AuthInterface};

class ConfigFile extends AuthProvider implements AuthInterface\Password {
    public function validatePassword(
        string $username,
        #[\SensitiveParameter] string $password
    ): bool {
        $hash = $this->config['users']["$username.password-hash"] ?? null;
        if (!isset($hash)) {
            return false;
        }
        return password_verify($password, $hash);
    }
}