you'd need to check the password in the db query

and how you pass the password into the query depends on how you've hashed it

read what i said

show the code of how it's being hashed before being stored

ok and let's see how you're checking the password. the first code you shared doesn't show you checking it at all

what part fails? from what i can tell this looks ok

i'd try logging out all the values as you receive them and hash them and then also when you try to validate and see if you can find where that difference appears

before you save the hashed value, when you log it, is it the same as after it is saved?

or are you saying it changes after saving it

and it's not some issue where there's duplicate emails and you're retrieving the incorrect user?

you got some troubleshooting to do then

either you're not reading the users correctly, you're not storing things correctly, there's some other thing you're doing that is causing an issue or there's a bug in some library. you need to figure out where the issue is, no one here is going to be able to do it for you

i think it's expected