diff --git a/src/Security/SQLLoginUserAuthenticator.php b/src/Security/SQLLoginUserAuthenticator.php index 6670214..239f94e 100644 --- a/src/Security/SQLLoginUserAuthenticator.php +++ b/src/Security/SQLLoginUserAuthenticator.php @@ -84,9 +84,11 @@ class SQLLoginUserAuthenticator extends AbstractLoginFormAuthenticator $request->getSession()->set(self::ERROR_LOGIN, true); throw new AuthenticationException(); } - if (!$remoteHashedPassword) { - throw new Exception('Erreur inconnue'); + + if (null === $remoteHashedPassword) { + $remoteHashedPassword = ""; } + try { // Comparaison remote hash et hash du input password + salt $this->passwordHasher->verify($remoteHashedPassword, $plaintextPassword, $remoteSalt);