[11.x] Fix Bcrypt/Argon/Argon2I Hashers not checking database field for nullish value before checking hash compatibility (#52297)

* Fix Bcrypt Hasher not checking database field for nullish value

Updates Bcrypt Hasher implementation to correctly check if the `$hashedValue` field being checked for Hash Algorithm compatibility is not `null` or of length `0`. This gives us the behavior before hash verification was added to the framework that will trigger the framework to return early with a proper response of `false` as opposed to a generic `RuntimeException` being thrown for a value that should never have been checked for hash algorithm compatibility

* Update ArgonHasher to check for nullish value before hash compatibility check

* Update Argon2IdHasher to check for nullish value before hash compatibility

Author: localpath

src/Illuminate/Hashing/Argon2IdHasher.php

@@ -18,13 +18,13 @@ class Argon2IdHasher extends ArgonHasher
      */
     public function check(#[\SensitiveParameter] $value, $hashedValue, array $options = [])
     {
-        if ($this->verifyAlgorithm && ! $this->isUsingCorrectAlgorithm($hashedValue)) {
-            throw new RuntimeException('This password does not use the Argon2id algorithm.');
-        }
-
         if (is_null($hashedValue) || strlen($hashedValue) === 0) {
             return false;
         }
+        
+        if ($this->verifyAlgorithm && ! $this->isUsingCorrectAlgorithm($hashedValue)) {
+            throw new RuntimeException('This password does not use the Argon2id algorithm.');
+        }      
 
         return password_verify($value, $hashedValue);
     }

src/Illuminate/Hashing/ArgonHasher.php

@@ -95,6 +95,10 @@ protected function algorithm()
      */
     public function check(#[\SensitiveParameter] $value, $hashedValue, array $options = [])
     {
+        if (is_null($hashedValue) || strlen($hashedValue) === 0) {
+            return false;
+        }
+        
         if ($this->verifyAlgorithm && ! $this->isUsingCorrectAlgorithm($hashedValue)) {
             throw new RuntimeException('This password does not use the Argon2i algorithm.');
         }

src/Illuminate/Hashing/BcryptHasher.php

@@ -67,6 +67,10 @@ public function make(#[\SensitiveParameter] $value, array $options = [])
      */
     public function check(#[\SensitiveParameter] $value, $hashedValue, array $options = [])
     {
+        if (is_null($hashedValue) || strlen($hashedValue) === 0) {
+            return false;
+        }
+        
         if ($this->verifyAlgorithm && ! $this->isUsingCorrectAlgorithm($hashedValue)) {
             throw new RuntimeException('This password does not use the Bcrypt algorithm.');
         }