Sonata Admin: why the password field is not encrypted?

Question

Using Symfony2, Sonata Admin and mongodb, the application save the fields but the password is not encrypted.

The CRUD work very fine saving the User fields on database, the problem is when loggin i got "Bad Credentials", and when i see the database the password is not encrypted.

I am not using UserBundle,FOSUserBundle.

1. UserAdmin.php

    protected function configureFormFields(FormMapper $formMapper) { $formMapper ->add('names', null, array('label' => 'Nombres','required' => true)) ->add('surnames', null, array('label' => 'Apellidos')) ->add('email', 'email', array('label' => 'Email','required' => true)) ->add('password', 'repeated', array('type' => 'password', 'first_options' => array('label' => 'Contraseña'), 'second_options' => array('label' => 'Repita la contraseña'), 'invalid_message' => 'Las contraseñas no coinciden' )) ->add('birthday','date', array('label' => 'Fecha de Nacimiento', 'years' => range(date('y'),date('Y')-90), 'format' => 'dd-MMMM-yyyy' )); } 

2. security.yml

    security: encoders: Bluetton\\DispatcherBundle\\Document\\User: algorithm: sha512 encode-as-base64: true iterations: 10 role_hierarchy: ROLE_ADMIN: ROLE_USER ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH] providers: dispatcherdb: mongodb: { class: Bluetton\\DispatcherBundle\\Document\\User, property: email } firewalls: main: pattern: /.* provider: dispatcherdb form_login: login_path: /login check_path: /login_check remember_me: true logout: path: /logout target: / remember_me: key: MiClaveSegura lifetime: 1800 path: /.* domain: ~ security: true anonymous: true access_control: - { path: /setup, roles: IS_AUTHENTICATED_ANONYMOUSLY } - { path: /login, roles: IS_AUTHENTICATED_ANONYMOUSLY } - { path: /user, roles: IS_AUTHENTICATED_ANONYMOUSLY } #ROLE_USER } # - { path: /.*, roles: IS_AUTHENTICATED_ANONYMOUSLY } 

3. SecurityController.php

    class SecurityController extends Controller { public function loginAction() { $request = $this->getRequest(); $session = $request->getSession(); // get the login error if there is one if ($request->attributes->has(SecurityContext::AUTHENTICATION_ERROR)) { $error = $request->attributes->get(SecurityContext::AUTHENTICATION_ERROR); } else { $error = $session->get(SecurityContext::AUTHENTICATION_ERROR); } return $this->render('DispatcherBundle:Security:login.html.twig', array( // last username entered by the user 'last_username' => $session->get(SecurityContext::LAST_USERNAME), 'error' => $error, )); } public function indexAction() { $user = new User(); $validator = $this->get('validator'); $errors = $validator->validate($user); if (count($errors) > 0) { $errorsString = (string) $errors; return new Response($errorsString); } return new Response('El usuario es valido!'); } } 

Answer 1

I solve the problem overriding the functions preUpdate() and prePersist() on UserAdmin class

            public function preUpdate($object) {
                $uniqid = $this->getRequest()->query->get('uniqid');
                $encoder = new MessageDigestPasswordEncoder('sha512', true, 10);
                $formData = $this->getRequest()->request->get($uniqid);
                if(array_key_exists('password', $formData) && $formData['password'] !== null && strlen($formData['password']['first' ]) > 0) {
                    $object->setPassword($encoder->encodePassword($formData['password']['first' ],$object->getSalt()));
                }
            }

            public function prePersist($object) {
                $encoder = new MessageDigestPasswordEncoder('sha512', true, 10);
                $uniqid = $this->getRequest()->query->get('uniqid');
                $formData = $this->getRequest()->request->get($uniqid);
                if(array_key_exists('password', $formData) && $formData['password'] !== null && strlen($formData['password']['first' ]) > 0) {
                    $object->setPassword($encoder->encodePassword($formData['password']['first' ],$object->getSalt()));
                }
            }

Answer 2

1. you should use hooks as described there (your case for sure)
2. you need to change field declaration to something like that (use plainPassword instead of password)

->add('plainPassword', 'repeated', array(
        'type' => 'password',
        'options' => array('translation_domain' => 'FOSUserBundle'),
        'first_options' => array('label' => 'form.password'),
        'second_options' => array('label' => 'form.password_confirmation'),
        'invalid_message' => 'fos_user.password.mismatch',
    ))