Symfony 身份验证总是返回“Invalid Credentials”

Question

我正在尝试使用 Symfony 实现身份验证。不幸的是，无论我尝试什么，我都会一遍又一遍地收到错误“ Invalid Credentials ”。

我读过其他文章，但没有一篇派上用场。这可能是什么原因，我该如何解决？

我尝试修改 getUsername() 以返回电子邮件而不是用户名，但它没有用。我检查了我的注册过程，确定哈希是否正确，将 password_verify 的结果转储为纯密码和来自数据库（这是真的）等。

我相信我做错了什么。

安全性.yml：

security:

    role_hierarchy:

    encoders:

        AppBundle\Entity\User: bcrypt

    # https://symfony.com/doc/current/security.html#b-configuring-how-users-are-loaded

    providers:

        db_provider:

            entity:

                class: AppBundle\Entity\User

                property: email

    firewalls:

        dev:

            pattern: ^/(_(profiler|wdt)|css|images|js)/

            security: false

        main:

            pattern: ^/

            provider: db_provider

            anonymous: ~

            form_login:

                username_parameter: _email

                check_path: security_login

                login_path: security_login

                default_target_path: homepage

                always_use_default_target_path: true

                csrf_token_generator: security.csrf.token_manager

            logout:

                path: security_logout

                target: security_login

    access_control:

        # this is a catch-all for the admin area

        # addition security lices in the controllers

        # - { path: '^/(%locale%)/admin', roles: ROLE_ADMIN

        # - { path: '^/ucp', roles: [IS_AUTHENTICATED_FULLY] }

login.html.twig

<form name="authenticate" action="{{ path('security_login') }}" method="post" class="loginForm" id="loginForm">

    <div class="form-group">

        <input type="email" class="form-control" name="_email" value="{{ last_username }}" id="email" placeholder="Имейл адрес"/>

    </div>

    <div class="form-group">

        <input type="password" class="form-control" name=_password" id="password" placeholder="Парола"/>

    </div>

    <input type="hidden" name="_csrf_token" value="{{ csrf_token('authenticate') }}">

    <div class="text-center"><button type="submit" id="loginButton">Log in</button></div>

</form>

Answer 1

哦，天哪，我已经解决了……不幸的是，这是一个令人尴尬的错误……我刚刚错过了密码名称属性的第一个引号，它是 name=_password”

Answer 2

您可以使用UserPasswordEncoderInterface清楚地散列您的密码，例如：.....use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;......class UserService implements UserServiceInterface{&nbsp; &nbsp; private $userPasswordEncoderInterface;&nbsp; &nbsp; private $entityManager;&nbsp; &nbsp; public function __construct(&nbsp; &nbsp; &nbsp; UserPasswordEncoderInterface $userPasswordEncoderInterface,&nbsp; &nbsp; &nbsp; EntityManagerInterface $entityManager)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; $this->userPasswordEncoderInterface = $userPasswordEncoderInterface;&nbsp; &nbsp; &nbsp; &nbsp; $this->entityManager = $entityManager;&nbsp; &nbsp; }&nbsp; &nbsp; public function save(User $user): Response&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; $passwordHash = $this->userPasswordEncoderInterface->encodePassword($user, $user->getPassword());&nbsp; &nbsp; &nbsp; &nbsp; $user->setPassword($passwordHash);&nbsp; &nbsp; &nbsp; &nbsp; $this->entityManager->persist($user);&nbsp; &nbsp; &nbsp; &nbsp; $this->entityManager->flush();&nbsp; &nbsp; &nbsp; &nbsp; return new Response('password encoded');&nbsp; &nbsp; }}