8000 [Security] 4.3 Always "Bad credentials." with algorithm "auto" · Issue #31758 · symfony/symfony · GitHub
[go: up one dir, main page]
Skip to content
[Security] 4.3 Always "Bad credentials." with algorithm "auto" #31758
New issue
New issue
Closed
Closed
[Security] 4.3 Always "Bad credentials." with algorithm "auto"#31758
Labels
BugSecurityStatus: Needs Review
Milestone
 
4.3
@zorn-v

Description

@zorn-v
zorn-v
opened on May 31, 2019

Symfony version(s) affected: 4.3.0

Description
Previosly encoded password becomes invalid. All of them started with "$2y$13$" which means "bcrypt wit cost 13" I think.

How to reproduce
Create user with "bcrypt" password encoder, change encoder to "auto" and try to login.

Additional context
I use doctrine entity user provider.
PHP 7.2.17 no sodium installed

Metadata

Metadata

Assignees

No one assigned

    Labels

    BugSecurityStatus: Needs Review

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions
      0