Symfony 2.1 bad credentials only when encoding the password

Question

Here is my code for adding admin user:

public function addAction(Request $request){
    $admin=new Admin();
    $form=$this->createForm(new AdminType(), $admin);
    if($request->getMethod()=='POST'){
        $form->bindRequest($request);
        if($form->isValid()){
            $factory = $this->get('security.encoder_factory');
            $encoder = $factory->getEncoder($admin);
            $password = $encoder->encodePassword($admin->getPassword(), $admin->getSalt());
            $admin->setPassword($password);

            $em=$this->getDoctrine()->getEntityManager();
            $em->persist($admin);
            $em->flush();
        }
    }
    return $this->render('PuzzleAdminBundle:Admin:add.html.twig', array(
        'form'=>$form->createView()
    ));
}

and here is my security.yml:

security:
encoders:
    Puzzle\AdminBundle\Entity\Admin: sha512
    Symfony\Component\Security\Core\User\User: plaintext

role_hierarchy:
    ROLE_ADMIN:       ROLE_USER
    ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]

providers:
    chain_providers:
        chain:
            providers: [admin_db, in_memory]
    admin_db:
        entity: { class: Puzzle\AdminBundle\Entity\Admin, property: username }
    in_memory:
        memory:
            users:
                root: { password: 123456, roles: [ 'ROLE_SUPER_ADMIN' ] }

Everything is OK when i want to login on root, or when I set up entity encoder to plaintext. Why I always get bad credentials when I set up entity encoder to sha512?

nalply · Accepted Answer · 2012-10-01 11:29:03Z

8

Check the field length in your database. If you were following "The Book" then likely your field will be set to varchar(50). Base64-encoded SHA-512 will output an 88 character string. Adjust for this and you should be good to go.

edited Oct 1, 2012 at 11:29

nalply

29.2k15 gold badges84 silver badges105 bronze badges

answered Oct 1, 2012 at 11:17

Jgarib

811 bronze badge

Sign up to request clarification or add additional context in comments.

2 Comments

Gerrit Wessels Over a year ago

You sir, are a gentleman and a scholar! I was following the book and assumed I did something wrong with the YML files... sigh.

ValentinH Over a year ago

OMG!!! Thank you so much! I just spent two hours changing everything and you saved me!

femtoRgon · Accepted Answer · 2012-09-25 18:47:09Z

1

I believe that the 'password' value defined would need to be the value post-encoding. So the value it will be looking for when set up to use a sha512 encoder will be the sha512 hash of '123456' rather than the plain text password.

Take a look here: http://symfony.com/doc/current/book/security.html#encoding-the-user-s-password . The paragraph after the first example in this section deals with this specifically.

edited Sep 25, 2012 at 18:47

answered Sep 25, 2012 at 18:40

femtoRgon

33.4k7 gold badges67 silver badges90 bronze badges

Comments

MaxMendez · Accepted Answer · 2013-04-08 02:32:46Z

1

I had the problem indicated and in my case it was a pretty silly thing, the length of the field in the database too small

answered Apr 8, 2013 at 2:32

MaxMendez

111 bronze badge

Collectives™ on Stack Overflow

Symfony 2.1 bad credentials only when encoding the password

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related