如何在登录控制器中使用Crypt加密登录

Question

I am using Crypt:: for registration and login. My registration is successful but login is not successful. Please check the code and help me.

public function Login(Request $request)
{
    $this->validate($request, [
        'email' => 'required',
        'password' => 'required',
    ]);

    $userdata = array(
        'email' => $request->email,
        'password' => \Crypt::encrypt($request->password)
    );

    if (Auth::attempt($userdata) {
        echo "success";die();
    } 

    return "Ops! snap! seems like you provide an invalid login credentials";
}

Answer 1

Originial

You need to use Hashing, not Encryption.

Registration

...

$userdata = [
    'email'    => $request->email
    'password' => Hash::make($request->password)
];

...

// User saved..

Login

$credentials = $request->only('email', 'password');

if (Auth::attempt($credentials) {
    // It work
} 

Ref :

• https://laravel.com/docs/5.6/authentication
• https://laravel.com/docs/5.6/hashing

---

Update

OP : I need to Crypt::decrypt to decode the password and send on email. Using hash i couldn't decode it. Thats the reason i need Crypt.

I really don't recommend it. That's why we have the "forgot password" feature to create new password.

Is it secure to store passwords with 2 way encryption?

Okay, back to the topic, How to login with Crypt encryption?

You need to add login() method in Auth\LoginController :

/**
 * Handle a login request to the application.
 *
 * @param  \Illuminate\Http\Request  $request
 * @return \Illuminate\Http\RedirectResponse|\Illuminate\Http\Response|\Illuminate\Http\JsonResponse
 *
 * @throws \Illuminate\Validation\ValidationException
 */
public function login(Request $request)
{
    $decrypted = $request->input('password'); 
    $user      = User::where('email', $request->input('email'))->first();

    if ($user) {
        if (Crypt::decryptString($user->password) == $decrypted) {
            Auth::login($user);

            return $this->sendLoginResponse($request);
        }
    }

    return $this->sendFailedLoginResponse($request);
}

---

WARNING!

All of Laravel's encrypted values are signed using a message authentication code (MAC) so that their underlying value can not be modified once encrypted.

You must have the same key. If you change the key (artisan key:generate), it means you will not be able to login.

I really don't recommend it.