private static bool IsPasswordMatch(UserCredentials userCredentials, string suppliedPassword) { var databaseHashedUserPassword = Convert.FromBase64String(userCredentials.PasswordHash); var databaseUserSalt = Convert.FromBase64String(userCredentials.PasswordSalt); var providedPasswordHash = UserExtensions.HashPassword(Encoding.UTF8.GetBytes(suppliedPassword), databaseUserSalt, userCredentials.HashIterations); return(UserExtensions.PasswordHashesEqual(databaseHashedUserPassword, providedPasswordHash)); }