-
-
Notifications
You must be signed in to change notification settings - Fork 9.6k
[SecurityBundle] Changed encoder configuration example to bcrypt #20301
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
@@ -386,9 +386,9 @@ private function addEncodersSection(ArrayNodeDefinition $rootNode) | |||
->children() | |||
->arrayNode('encoders') | |||
->example(array( | |||
'Acme\DemoBundle\Entity\User1' => 'sha512', | |||
'Acme\DemoBundle\Entity\User1' => 'bcrypt', |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could we also change the deprecated 'Acme\DemoBundle\Entity\User1'
example by 'AppBundle\Entity\User1'
? Thanks!
'Acme\DemoBundle\Entity\User2' => array( | ||
'algorithm' => 'sha512', | ||
'algorithm' => 'bcrypt', | ||
'encode_as_base64' => 'true', |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We need to remove encode_as_base64
and iterations
... but we could add cost
0498f1e
to
b2831a9
Compare
I made the changes. |
status: needs review |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
Very nice improvements! Thanks @jeremyFreeAgent
What about changing the target branch to 2.7? |
Can be done on merge, it's up to you :) |
👍 |
Thank you @jeremyFreeAgent. |
…o bcrypt (jeremyFreeAgent) This PR was submitted for the master branch but it was merged into the 2.7 branch instead (closes #20301). Discussion ---------- [SecurityBundle] Changed encoder configuration example to bcrypt | Q | A | ------------- | --- | Branch? | "master" | Bug fix? | no | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | - | License | MIT | Doc PR | - Simple change in the configuration example to help developers to not use `sha512` as encoder when using `config:dump-reference`. Commits ------- a55058f [SecurityBundle] Changed encoder configuration example to bcrypt
Simple change in the configuration example to help developers to not use
sha512
as encoder when usingconfig:dump-reference
.