Authentication issue

[mdsohelmia]

• Laravel Version: 8.10.0
• PHP Version: PHP 7.4.9
• Database Driver & Version: eloquent & mysql-5.7.24

Description:

When I make authentication laravel.attempt & Hash::check() method always returns false.

Steps To Reproduce:

//user migration
      Schema::create('users', function (Blueprint $table) {
            $table->id();
            $table->string('name');
            $table->string('email')->unique();
            $table->string('mobile')->unique();
            $table->string('dob')->nullable();
            $table->string('sex');
            $table->text('image')->nullable();
            $table->timestamp('email_verified_at')->nullable();
            $table->string('password', 255);
    });


User::create([
            'name' => 'Admin',
            'email' => '[email protected]',
            'email_verified_at' => now(),
            'password' => Hash::make('12345'),
            'sex' => 'male',
            'mobile' => '01770146178',
            'remember_token' => Str::random(10),
        ]);

Route::get('/test', function () {
    $data = [
        'email' => '[email protected]',
        'password' => '12345',
    ];

    $user = User::where('email', '[email protected]')->first();
    dd(Hash::check('12345', $user->password));
    //always returns false

    dd(Auth::attempt($data));

    //always returns false
    if (Auth::attempt($data)) {
        return redirect()->route('dashboard');
    }
});

[paras-malhotra]

Change 'password' => '12345', to 'password' => bcrypt('12345'),

dd($user->password) to check if it's plain text or hashed?

[mdsohelmia]

Change 'password' => '12345', to 'password' => bcrypt('12345'),
why bcrypt ?

[paras-malhotra]

@Sohel1999 bcrypt is shorthand for Hash::make(). Hash::check and Auth::attempt compare unhashed and hashed values and not two unhashed values. Read the documentation to learn more.

[mdsohelmia]

@paras-malhotra i know php Has::make() shorthand bcrypt .but Laravel docs provide plaine -text compare hasvalue

if (Hash::check('plain-text', $hashedPassword)) {
    // The passwords match...
}

This example from laravel docs

[paras-malhotra]

dd($user->password) and if it's plaintext then that's why its not working. My best guess is that you are comparing plain-text to plain-text.

[mdsohelmia]

@paras-malhotra This my Model

App\Models\User {#1427 ▼
  #guarded: []
  #hidden: array:2 [▶]
  #casts: array:1 [▶]
  #connection: "mysql"
  #table: "users"
  #primaryKey: "id"
  #keyType: "int"
  +incrementing: true
  #with: []
  #withCount: []
  #perPage: 15
  +exists: true
  +wasRecentlyCreated: false
  #attributes: array:16 [▶]
  #original: array:16 [▼
    "id" => 1
    "name" => "Admin"
    "email" => "[email protected]"
    "mobile" => "01770146178"
    "dob" => null
    "sex" => "male"
    "image" => null
    "email_verified_at" => "2020-10-14 16:10:22"
    "password" => "$2y$10$.6ls82LrifLyzC2VMr74z.9LxpOZjRd8dB/2iUeY40k0YqOc7f20e"
    "joining_date" => null
    "duty_station" => null
    "circle_id" => null
    "office_id" => null
    "remember_token" => "6RqfSnqSzY"
    "created_at" => "2020-10-14 16:10:22"
    "updated_at" => "2020-10-14 16:10:22"
  ]
  #changes: []
  #classCastCache: []
  #dates: []
  #dateFormat: null
  #appends: []
  #dispatchesEvents: []
  #observables: []
  #relations: []
  #touches: []
  +timestamps: true
  #visible: []
  #fillable: []
  #rememberTokenName: "remember_token"
}

[lagbox]

do you happen to have a mutator for the password attribute on your model?

[mdsohelmia]

yes issue fixed thanks all

[mdsohelmia]

yes this issue fixed

…

On Sun, Oct 18, 2020 at 3:38 AM lagbox ***@***.***> wrote: do you happen to have a mutator for the password attribute on your model? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#34832 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AJURFU7C33NE73ETUFO2EVLSLIFFBANCNFSM4SUT55OA> .