Question

我目前在解决问题上遇到困难。我是CakePHP 3的新手，并被分配创建一个博客系统（用户，博客，角色）以进一步培训。我做的第一件事是插入身份验证部分。最初，登录工作正常（我使用/users/add.ctp通过DefaultPasswordHasher使用带有哈希密码的3个帐户，并尝试使用每个帐户登录）。经过几天的网站前端设计工作，我创建了2个新用户，并注意到当我尝试登录任何一个新帐户时，$ user = $ this-> Auth-> identify（）返回false 。我尝试使用一个旧帐户登录，并定义了$ user。为了进行测试，我编辑了旧帐户的密码之一，并尝试使用新密码登录，现在$ user现在返回false。

这是我的代码：

//App Controller
$this->loadComponent('Auth', [
        'authenticate' => [
            'Form' => [
                'fields' => ['username' => 'username','password' => 'password'],

            ]
        ],
        'authError' => 'Please login before continuing.',
        'loginAction' => ['controller' => 'Users', 'action' => 'login'],
        'loginRedirect' => ['controller' => 'Blogs', 'action' => 'index'],
        'logoutRedirect' =>  ['controller' => 'Users', 'action' => 'login'],
        'unauthorizedRedirect' => ['controller' => 'Users', 'action' => 'login']
    ]);

public function beforeFilter(Event $event)
{
    parent::beforeFilter($event);
    $this->Auth->allow();



    $this->set(compact('session_user'));
}

这是我的用户控制器登录名：

public function login()
{
    $this->viewBuilder()->setLayout('login');

    if ($this->request->is('post')) {
        $user = $this->Auth->identify();
        die(pr($user));  //<--To check if identify() catches login details
        if ($user) {
            $this->Auth->setUser($user);
            return $this->redirect($this->Auth->redirectUrl());
        }
        else {
            $this->Flash->error(__('Username/Password is invalid.'));
            return $this->redirect($this->Auth->config('loginAction'));
        }
    }
}

这是login.ctp

<div class = "login-container">
<div class = "login-div">
    <div = "login-field">
        <h1>Login Page</h1>
        <?= $this->Form->create(); ?>
        <?= $this->Form->control('username') ?>
        <?= $this->Form->control('password', ['type' => 'password']) ?>
        <?= $this->Form->button(__('Login')) ?>
        <?= $this->Form->end() ?>
    </div>
</div>

这是我的用户实体：

class User extends Entity
{

/**
 * Fields that can be mass assigned using newEntity() or patchEntity().
 *
 * Note that when '*' is set to true, this allows all unspecified fields to
 * be mass assigned. For security purposes, it is advised to set '*' to false
 * (or remove it), and explicitly make individual fields accessible as needed.
 *
 * @var array
 */
protected $_accessible = [
    'username' => true,
    'role_id' => true,
    'email' => true,
    'password' => true,
    'created' => true,
    'modified' => true,
    'role' => true,
    'blogs' => true
];

/**
 * Fields that are excluded from JSON versions of the entity.
 *
 * @var array
 */
protected $_hidden = [
    'password'
];

public function _setPassword($value) {
    $hasher = new DefaultPasswordHasher();
    return $hasher->hash('$value');
}

}

这是我的UsersTable：

class UsersTable extends Table
{

/**
 * Initialize method
 *
 * @param array $config The configuration for the Table.
 * @return void
 */
public function initialize(array $config)
{
    parent::initialize($config);

    $this->setTable('users');
    $this->setDisplayField('id');
    $this->setPrimaryKey('id');

    $this->addBehavior('Timestamp');

    $this->belongsTo('Roles', [
        'foreignKey' => 'role_id',
        'joinType' => 'INNER'
    ]);
    $this->hasMany('Blogs', [
        'foreignKey' => 'user_id'
    ]);
    $this->hasMany('Comments', [
        'foreignKey' => 'user_id'
    ]);
}

/**
 * Default validation rules.
 *
 * @param \Cake\Validation\Validator $validator Validator instance.
 * @return \Cake\Validation\Validator
 */
public function validationDefault(Validator $validator)
{
    $validator
        ->integer('id')
        ->allowEmpty('id', 'create');

    $validator
        ->scalar('username')
        ->maxLength('username', 255)
        ->requirePresence('username', 'create')
        ->notEmpty('username');


    $validator
        ->email('email')
        ->requirePresence('email', 'create')
        ->notEmpty('email');

    $validator
        ->scalar('password')
        ->maxLength('password', 255)
        ->requirePresence('password', 'create')
        ->notEmpty('password');

    return $validator;
}

/**
 * Returns a rules checker object that will be used for validating
 * application integrity.
 *
 * @param \Cake\ORM\RulesChecker $rules The rules object to be modified.
 * @return \Cake\ORM\RulesChecker
 */
public function buildRules(RulesChecker $rules)
{
    $rules->add($rules->isUnique(['username']));
    $rules->add($rules->isUnique(['email']));
    $rules->add($rules->existsIn(['role_id'], 'Roles'));

    return $rules;
}

}

我在$ this-> Auth-> identify（）之后插入了die（pr（$ user））;在用户控制器的登录功能上。我确信可以通过在localhost / phpmyadmin和users / view.ctp上检查数据来正确保存和散列数据，只是新创建/编辑的帐户似乎无法通过登录。

Answer 1

我弄清楚了哪里出了错。我在_setPassword函数中的$ value上用单引号引起了密码哈希。

CakePHP 3.6 $ this-> Auth-> identify（）对新创建的数据返回FALSE

1 个答案: