fix: vérification du mdp en cas de mdp non défini

2024-06-06 10:36:21 +02:00 · 2024-06-06 10:36:21 +02:00 · abe212c7ad
commit abe212c7ad
parent 890c44da0c
1 changed files with 4 additions and 2 deletions
--- a/src/Security/SQLLoginUserAuthenticator.php
+++ b/src/Security/SQLLoginUserAuthenticator.php
@ -84,9 +84,11 @@ class SQLLoginUserAuthenticator extends AbstractLoginFormAuthenticator
            $request->getSession()->set(self::ERROR_LOGIN, true);
            throw new AuthenticationException();
        }
-        if (!$remoteHashedPassword) {
-            throw new Exception('Erreur inconnue');
+
+        if (null === $remoteHashedPassword) {
+            $remoteHashedPassword = "";
        }
+
        try {
            // Comparaison remote hash et hash du input password + salt
            $this->passwordHasher->verify($remoteHashedPassword, $plaintextPassword, $remoteSalt);