Laravel Encryption/Decryption issue

Question

I am storing users credentials for a 3rd party service in my database. When storing, these are cast to encrypted as below:

protected $casts = [
    'enabled' => 'boolean',
    'token_is_valid' => 'boolean',
    'service_username' => 'encrypted',
    'service_password' => 'encrypted',
    'service_practice_pin' => 'encrypted',,
];

I then need to use the details to authenticate with the 3rd party service.

I can return the full model from my database: dd($integration), however if I try to access the propery dd($integration->service_username) I get the below error:

The payload is invalid. {"userId":12,"exception":"[object] (Illuminate\\Contracts\\Encryption\\DecryptException(code: 0): The payload is invalid. at /var/www/app/vendor/laravel/framework/src/Illuminate/Encryption/Encrypter.php:221)
[stacktrace]

The 3rd party service I am using requires the decrypted values to authenticate.

I tried adding an accessor to the model but still get the same error

public function getDecryptedServiceUsernameAttribute()
{
    return decrypt($this->attributes['service_username']);
}

How can I receive/send the decrypted value? Do I need to store it differently? current column type is varchar(191)

@aynber Changed column length to 255 and it worked.. rookie mistake. Feel free to add as an answer so I can accept — J Foley
– J Foley, Commented Jun 29, 2022 at 15:55

aynber · Accepted Answer · 2022-06-29 16:24:57Z

2

Depending on what you're encrypting, 191 can be too short. 255 is probably standard, but to make sure you never hit the limit, you would be better off changing the column to a text column. Using Crypt::encrypt with a simple string, a 200 character string has the encrypted length of 568 characters. Here is what I tested with Laravel 9:

$str = 'a'; 
for($i=0; $i< 200; $i++) { 

    $crypt = Crypt::encrypt($str);
    echo strlen($str)." - ".strlen($crypt)."\n"; 
    $str.='a';
}

And a sample of the results:

edited Jun 29, 2022 at 16:24

answered Jun 29, 2022 at 16:13

aynber

23.2k9 gold badges57 silver badges69 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Rohit Gupta · Accepted Answer · 2022-06-30 12:16:02Z

0

Make sure first it's encrypted. This kind of error can be due to passing a non encrypted value to decrypt helper function.

edited Jun 30, 2022 at 12:16

Rohit Gupta

4,27723 gold badges36 silver badges47 bronze badges

answered Jun 29, 2022 at 16:05

Reynier Hernández Palacios

11 bronze badge

Comments

Cristea · Accepted Answer · 2025-07-02 11:39:57Z

0

If you use Laravel automatic decrypt of a model property you can do it like this:

// Model
protected $casts = [
    'service_username' => 'encrypted'
]
protected $fillable = [ 
  'service_username' => 'encrypted',
]

/**
* @throws DecryptException     
*/
public function getDecryptedServiceUsername(): string
    {
        return $this->service_username;
    }

// Service
Model $myModel
try {
    $myModel->getDecryptedServiceUsername() // this can now throw an error
} catch(DecryptException $e) {...}

answered Jul 2 at 11:39

Cristea

1,08513 silver badges19 bronze badges

Collectives™ on Stack Overflow

Laravel Encryption/Decryption issue

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related