1

This doesn't work:

$user = User::find()->email("bob@example.com")->one();
if ($user->authenticate("myClearTextPassword")) {
  // This is never true, so you never get here
}

Is this method broken, or am I using it incorrectly?

Improve this question
4
  • What does $user->authError return after you call the authenticate method?
    – Brad Bell ♦
    Dec 21, 2020 at 1:28
  • Thanks for taking a look @BradBell. I get invalid_credentials, even when the password is correct.
    – David Jones
    Dec 21, 2020 at 5:57
  • Is the user in a soft-deleted state? Or do you have craftcms.com/docs/3.x/config/… set to true?
    – Brad Bell ♦
    Dec 23, 2020 at 20:32
  • @BradBell I can confirm that this is not working still in 3.7.38. preventUserEnumeration has not been set and should be defaulted to false.
    – biko
    Apr 22, 2022 at 4:41

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.