2013-05-20 12:14:35 +05:30
|
|
|
<?php
|
|
|
|
/**
|
|
|
|
* CakePHP(tm) : Rapid Development Framework (http://cakephp.org)
|
|
|
|
* Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
|
|
|
|
*
|
|
|
|
* Licensed under The MIT License
|
|
|
|
* For full copyright and license information, please see the LICENSE.txt
|
|
|
|
* Redistributions of files must retain the above copyright notice.
|
|
|
|
*
|
|
|
|
* @copyright Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
|
|
|
|
* @link http://cakephp.org CakePHP(tm) Project
|
2013-06-03 01:04:00 +05:30
|
|
|
* @since CakePHP(tm) v 2.4.0
|
|
|
|
* @license http://www.opensource.org/licenses/mit-license.php MIT License
|
2013-05-20 12:14:35 +05:30
|
|
|
*/
|
2013-11-18 11:56:00 +01:00
|
|
|
|
2013-05-20 12:14:35 +05:30
|
|
|
App::uses('AbstractPasswordHasher', 'Controller/Component/Auth');
|
|
|
|
App::uses('Security', 'Utility');
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Blowfish password hashing class.
|
|
|
|
*
|
|
|
|
* @package Cake.Controller.Component.Auth
|
|
|
|
*/
|
|
|
|
class BlowfishPasswordHasher extends AbstractPasswordHasher {
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Generates password hash.
|
|
|
|
*
|
|
|
|
* @param string $password Plain text password to hash.
|
|
|
|
* @return string Password hash
|
2013-11-17 03:40:39 +01:00
|
|
|
* @link http://book.cakephp.org/2.0/en/core-libraries/components/authentication.html#using-bcrypt-for-passwords
|
2013-05-20 12:14:35 +05:30
|
|
|
*/
|
|
|
|
public function hash($password) {
|
|
|
|
return Security::hash($password, 'blowfish', false);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Check hash. Generate hash for user provided password and check against existing hash.
|
|
|
|
*
|
|
|
|
* @param string $password Plain text password to hash.
|
2014-06-01 03:06:05 +05:30
|
|
|
* @param string $hashedPassword Existing hashed password.
|
2014-07-03 15:36:42 +02:00
|
|
|
* @return bool True if hashes match else false.
|
2013-05-20 12:14:35 +05:30
|
|
|
*/
|
|
|
|
public function check($password, $hashedPassword) {
|
|
|
|
return $hashedPassword === Security::hash($password, 'blowfish', $hashedPassword);
|
|
|
|
}
|
|
|
|
|
|
|
|
}
|