Symfony 2-不使用bcrypt认证用户

Question

I add a user to the database.

I encode their password using bcrypt encryption:

$factory = $this->get('security.encoder_factory');
$encoder = $factory->getEncoder($user);
$password = $encoder->encodePassword($user->getPassword(),$user->getSalt());
$postData->setPassword($password);

This all persists to the database just fine.

On my User Entity my getSalt() method returns null:

public function getSalt(){
    return null;
}

Now when I try to authenticate the symfony logs tells me that I am entering bad credentials.

However...

If i use this site to encrypt my password with bcrypt:

http://bcrypthashgenerator.apphb.com/

Then enter the result into the database manually and try and authenticate with the users password i have updated with the results from the above link, It works fine.

So there is something I have not set, that when I am encrypting the password that symfony cannot authenticate against it.

I have tried the setting a salt on the getSalt(), setting it to an empty string.

EDIT I am using php 5.5.9

I have also tried using the BCryptPasswordEncoder($cost) class, setting the cost on the __construct the same as what's in my security.yml and it still does not authenticate.

EDIT I have also tried installing this class via composer to as suggested here .

EDIT

If I use the php method:

password_hash('testertester',PASSWORD_BCRYPT,array('cost'=>13));

It authenticates perfectly.

So its something to do deeper in Symfony. I'll keep digging.

Still no luck :-/

I am scouring the web to no avail so far.

Any help would be greatly appreciated.

Ad

Answer 1

I was passing in the existing entity object not the submitted data object!!

$postData = $form->getdata();

$factory = $this->get('security.encoder_factory');

$encoder = $factory->getEncoder($user);

$password = $encoder->encodePassword($user->getPassword(),$user->getSalt());

$postData->setPassword($password);

Note this line here:

$user->getPassword() needed to be $postData->getPassword()

$password = $encoder->encodePassword($postData->getPassword(),$user->getSalt());

You live and learn ay!