Manually encrypt user password in Symfony php

Question

I have a need to manually encrypt the password in the same way Symfony does it.

$user->setPlainPassword($password);
$userManager->updateUser($user);

This is application code that saves the user password. But it is obviously encrypted (not plain as method says).

How can I manually get the same result for given password?

EDIT1:

The problem is that I want to authenticate user manually in users controller code. I have readable username and password that comes as parameters. I want to return 401 if they to not exist in database.

@zaph I need the password to compare it with the one in database. Basically I need to authenticate user manually in php code. — eomeroff
– eomeroff, Commented Jun 7, 2017 at 7:54
I just copy-pasted your question title "Manually encrypt user password in Symfony php" to the google. And you won't believe - the first item is exactly what you want. — zerkms
– zerkms, Commented Jun 7, 2017 at 8:22
You do not need the password you need a password verifier. A password verifier is a representation of the password that can not be reversed to recover the password. On creation the password is run through the verifier and the result saved. On verification the password to e verified is again run through the verifier and the result compared to the saved verifier. For php there is a simple and secure pair of methods: password_hash() and password_verify(). See passwsord hash & verify — zaph
– zaph, Commented Jun 7, 2017 at 12:40

Kévin Dunglas · Accepted Answer · 2017-06-06 18:37:23Z

33

Symfony comes with a useful command to encode a password the same way it does:

bin/console security:encode-password 'your_plain_password' 'AppBundle\Entity\YourUserClass'

answered Jun 6, 2017 at 18:37

Kévin Dunglas

3,0842 gold badges28 silver badges45 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

zerkms Over a year ago

@eomeroff you could check the security:encode-password source to see how they do it. Seriously, don't be that lazy.

Omar Tariq Over a year ago

@eomeroff Get an IDE to quickly navigate through the code. For Symfony we mainly used PHPStorm.

Irwuin Over a year ago

Or just look in the symfony console for the possible commands, Simple as bonjour ;)

KoviNET · Accepted Answer · 2021-11-13 15:49:59Z

17

In newer Symfony versions (5.3+) you can do it by running CLI command:

bin/console security:hash-password

answered Nov 13, 2021 at 15:49

KoviNET

8291 gold badge10 silver badges23 bronze badges

Comments

miikes · Accepted Answer · 2017-06-07 08:26:01Z

9

Try this in your controller action:

$encoder = $this->get('security.encoder_factory')->getEncoder($userClass);
$encodedPassword = $encoder->encodePassword($plainPassword);

answered Jun 7, 2017 at 8:26

miikes

9947 silver badges13 bronze badges

1 Comment

Breith Over a year ago

You can use UserPasswordEncoderInterface class too: symfony.com/doc/4.0/security/password_encoding.html

Collectives™ on Stack Overflow

Manually encrypt user password in Symfony php

3 Answers 3

3 Comments

Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

3 Comments

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related