for testing and deploying your application
for finding and fixing issues
for empowering human code reviews
<?php
/*
* This file is part of the DoyoUserBundle project.
*
* (c) Anthonius Munthi <[email protected]>
* For the full copyright and license information, please view the LICENSE
* file that was distributed with this source code.
*/
declare(strict_types=1);
namespace Doyo\UserBundle\Util;
use Doyo\UserBundle\Model\UserInterface;
use Symfony\Component\Security\Core\Encoder\BCryptPasswordEncoder;
use Symfony\Component\Security\Core\Encoder\EncoderFactoryInterface;
class PasswordUpdater implements PasswordUpdaterInterface
{
/**
* @var EncoderFactoryInterface
private $encoderFactory;
* PasswordUpdater constructor.
public function __construct(EncoderFactoryInterface $encoderFactory)
$this->encoderFactory = $encoderFactory;
}
public function hashPassword(UserInterface $user)
$plainPassword = $user->getPlainPassword();
if (null === $plainPassword || 0 === \strlen($plainPassword)) {
return;
$encoder = $this->encoderFactory->getEncoder($user);
if ($encoder instanceof BCryptPasswordEncoder) {
$user->setSalt(null);
} else {
$salt = rtrim(str_replace('+', '.', base64_encode(random_bytes(32))), '=');
$user->setSalt($salt);
$hashedPassword = $encoder->encodePassword($plainPassword, $user->getSalt());
$user->setPassword($hashedPassword);
$user->eraseCredentials();