App\Security\Encoder\DefaultPasswordEncoder

Complexity

Total Complexity

3

Size/Duplication

Total Lines	18
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	isPasswordValid()	0	5	1
A	encodePassword()	0	3	1
A	needsRehash()	0	3	1

<?php

declare(strict_types=1);
/**
 * This file is part of the mailserver-admin package.
 * (c) Jeffrey Boehm <https://github.com/jeboehm/mailserver-admin>
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace App\Security\Encoder;

use Symfony\Component\Security\Core\Encoder\PasswordEncoderInterface;

class DefaultPasswordEncoder implements PasswordEncoderInterface
{
    public function isPasswordValid($encoded, $raw, $salt): bool
    {
        return hash_equals(
            $this->encodePassword($raw, $salt),
            $encoded
        );
    }

    public function encodePassword($raw, $salt): string
    {
        return crypt($raw, sprintf('$5$rounds=5000$%s$', $salt));

The expression return crypt($raw, sprintf('$5$rounds=5000$%s$', $salt)) could return the type null which is incompatible with the type-hinted return string. Consider adding an additional type-check to rule them out.

    }

    public function needsRehash(string $encoded): bool
    {
        return false;
    }
}