Fix changing passwords with MongoDB persistence

Author: thekid

ChangeLog.md

@@ -3,6 +3,10 @@ CAS Server change log
 
 ## ?.?.? / ????-??-??
 
+## 0.10.1 / 2022-06-18
+
+* Fixed changing passwords with MongoDB persistence - @thekid
+
 ## 0.10.0 / 2022-06-17
 
 * Merged PR #18: Use Redis for sessions in production - this way, the

src/main/php/de/thekid/cas/mongodb/UserCollection.php

@@ -62,7 +62,7 @@ public function remove(string|User $user): void {
   public function password(string|User $user, string|Secret $password): void {
     $this->collection->update(
       ['username' => $user instanceof User ? $user->username() : $user],
-      ['hash' => $this->hash($password)]
+      [['$set' => ['hash' => $this->hash($password)]]]
     );
   }