ilBcryptPhpPasswordEncoder Class Reference

Inheritance diagram for ilBcryptPhpPasswordEncoder:

Collaboration diagram for ilBcryptPhpPasswordEncoder:

Public Member Functions
	__construct (array $config=[])
	benchmarkCost (float $time_target=0.05)
	getName ()
	Returns a unique name/id of the concrete password encoder. More...
	getCosts ()
	setCosts (string $costs)
	encodePassword (string $raw, string $salt)
	Encodes the raw password. More...
	isPasswordValid (string $encoded, string $raw, string $salt)
	Checks a raw password against an encoded password. More...
	requiresReencoding (string $encoded)
	Returns whether the encoded password needs to be re-encoded. More...
Public Member Functions inherited from ilBasePasswordEncoder
	isSupportedByRuntime ()
	Returns whether the encoder is supported by the runtime (PHP, HHVM, ...) More...
	requiresSalt ()
	Returns whether the encoder requires a salt. More...
	requiresReencoding (string $encoded)
	Returns whether the encoded password needs to be re-encoded. More...

Protected Member Functions
	init ()
Protected Member Functions inherited from ilBasePasswordEncoder
	comparePasswords (string $knownString, string $userString)
	Compares two passwords. More...
	isPasswordTooLong (string $password)

Protected Attributes
string	$costs = '08'

Detailed Description

Definition at line 26 of file class.ilBcryptPhpPasswordEncoder.php.

Constructor & Destructor Documentation

__construct()

ilBcryptPhpPasswordEncoder::__construct

(

array

$config = []

)

Parameters

array<string,mixed>

$config

Exceptions

ilPasswordException

Definition at line 34 of file class.ilBcryptPhpPasswordEncoder.php.

References $config, ILIAS\LTI\ToolProvider\$key, benchmarkCost(), init(), and setCosts().

    {
        foreach ($config as $key => $value) {
            if (strtolower($key) === 'cost') {
                $this->setCosts($value);
            }
        }

        if (!isset($config['cost']) && static::class === self::class) {
            // Determine the costs only if they are not passed in constructor
            $this->setCosts((string) $this->benchmarkCost());
        }

        $this->init();
    }

Here is the call graph for this function:

Member Function Documentation

benchmarkCost()

ilBcryptPhpPasswordEncoder::benchmarkCost

(

float

$time_target = 0.05

)

See also

http://php.net/manual/en/function.password-hash.php#example-984

Exceptions

ilPasswordException

Definition at line 58 of file class.ilBcryptPhpPasswordEncoder.php.

Referenced by __construct(), and ilBcryptPhpPasswordEncoderTest\testCostsCanBeDeterminedDynamically().

                                                            : int
    {
        $cost = 8;

        do {
            ++$cost;
            $start = microtime(true);
            $encoder = new self(['cost' => (string) $cost]);
            $encoder->encodePassword('test', '');
            $end = microtime(true);
        } while (($end - $start) < $time_target && $cost < 32);

        return $cost;
    }

Here is the caller graph for this function:

encodePassword()

ilBcryptPhpPasswordEncoder::encodePassword	(	string	$raw,
		string	$salt
	)

Encodes the raw password.

Parameters

string	$raw	The password to encode
string	$salt	The salt

Returns

string The encoded password

Implements ilPasswordEncoder.

Definition at line 94 of file class.ilBcryptPhpPasswordEncoder.php.

References getCosts(), and ilBasePasswordEncoder\isPasswordTooLong().

Referenced by ilBcryptPhpPasswordEncoderTest\testExceptionIsRaisedIfThePasswordExceedsTheSupportedLengthOnEncoding(), ilBcryptPhpPasswordEncoderTest\testPasswordShouldBeCorrectlyEncodedAndVerified(), and ilBcryptPhpPasswordEncoderTest\testReencodingIsDetectedWhenNecessary().

                                                             : string
    {
        if ($this->isPasswordTooLong($raw)) {
            throw new ilPasswordException('Invalid password.');
        }

        return password_hash($raw, PASSWORD_BCRYPT, [
            'cost' => $this->getCosts()
        ]);
    }

Here is the call graph for this function:

Here is the caller graph for this function:

getCosts()

ilBcryptPhpPasswordEncoder::getCosts

(

)

Definition at line 78 of file class.ilBcryptPhpPasswordEncoder.php.

References $costs.

Referenced by ilBcryptPasswordEncoder\encode(), encodePassword(), requiresReencoding(), ilBcryptPhpPasswordEncoderTest\testCostsCanBeRetrievedWhenCostsAreSet(), and ilBcryptPasswordEncoderTest\testCostsCanBeRetrievedWhenCostsAreSet().

                              : string
    {
        return $this->costs;
    }

Here is the caller graph for this function:

getName()

ilBcryptPhpPasswordEncoder::getName

(

)

Returns a unique name/id of the concrete password encoder.

Implements ilPasswordEncoder.

Definition at line 73 of file class.ilBcryptPhpPasswordEncoder.php.

Referenced by ilBcryptPhpPasswordEncoderTest\testNameShouldBeBcryptPhp().

                             : string
    {
        return 'bcryptphp';
    }

Here is the caller graph for this function:

init()

ilBcryptPhpPasswordEncoder::init ( )

protected

Definition at line 50 of file class.ilBcryptPhpPasswordEncoder.php.

Referenced by __construct().

                             : void
    {
    }

Here is the caller graph for this function:

isPasswordValid()

ilBcryptPhpPasswordEncoder::isPasswordValid	(	string	$encoded,
		string	$raw,
		string	$salt
	)

Checks a raw password against an encoded password.

The raw password has to be injected into the encoder instance before.

Parameters

string	$encoded	An encoded password
string	$raw	A raw password
string	$salt	The salt, may be empty

Returns

Boolean true if the password is valid, false otherwise

Implements ilPasswordEncoder.

Definition at line 105 of file class.ilBcryptPhpPasswordEncoder.php.

Referenced by ilBcryptPhpPasswordEncoderTest\testPasswordShouldBeCorrectlyEncodedAndVerified(), and ilBcryptPhpPasswordEncoderTest\testPasswordVerificationShouldFailIfTheRawPasswordExceedsTheSupportedLength().

                                                                               : bool
    {
        return password_verify($raw, $encoded);
    }

Here is the caller graph for this function:

requiresReencoding()

ilBcryptPhpPasswordEncoder::requiresReencoding

(

string

$encoded

)

Returns whether the encoded password needs to be re-encoded.

Implements ilPasswordEncoder.

Definition at line 110 of file class.ilBcryptPhpPasswordEncoder.php.

References getCosts().

Referenced by ilBcryptPhpPasswordEncoderTest\testReencodingIsDetectedWhenNecessary().

                                                       : bool
    {
        return password_needs_rehash($encoded, PASSWORD_BCRYPT, [
            'cost' => $this->getCosts()
        ]);
    }

Here is the call graph for this function:

Here is the caller graph for this function:

setCosts()

ilBcryptPhpPasswordEncoder::setCosts

(

string

$costs

)

Definition at line 83 of file class.ilBcryptPhpPasswordEncoder.php.

References ILIAS\Repository\int().

Referenced by __construct(), ilBcryptPhpPasswordEncoderTest\testCostsCanBeRetrievedWhenCostsAreSet(), ilBcryptPasswordEncoderTest\testCostsCanBeRetrievedWhenCostsAreSet(), ilBcryptPhpPasswordEncoderTest\testCostsCanBeSetInRange(), ilBcryptPasswordEncoderTest\testCostsCanBeSetInRange(), ilBcryptPhpPasswordEncoderTest\testCostsCannotBeSetAboveRange(), ilBcryptPasswordEncoderTest\testCostsCannotBeSetAboveRange(), ilBcryptPhpPasswordEncoderTest\testCostsCannotBeSetBelowRange(), ilBcryptPasswordEncoderTest\testCostsCannotBeSetBelowRange(), ilBcryptPhpPasswordEncoderTest\testExceptionIsRaisedIfThePasswordExceedsTheSupportedLengthOnEncoding(), ilBcryptPasswordEncoderTest\testExceptionIsRaisedIfThePasswordExceedsTheSupportedLengthOnEncoding(), ilBcryptPhpPasswordEncoderTest\testPasswordShouldBeCorrectlyEncodedAndVerified(), ilBcryptPasswordEncoderTest\testPasswordShouldBeCorrectlyEncodedAndVerified(), ilBcryptPhpPasswordEncoderTest\testPasswordVerificationShouldFailIfTheRawPasswordExceedsTheSupportedLength(), ilBcryptPasswordEncoderTest\testPasswordVerificationShouldFailIfTheRawPasswordExceedsTheSupportedLength(), and ilBcryptPhpPasswordEncoderTest\testReencodingIsDetectedWhenNecessary().

                                           : void
    {
        if ($costs !== '') {
            $numeric_costs = (int) $costs;
            if ($numeric_costs < 4 || $numeric_costs > 31) {
                throw new ilPasswordException('The costs parameter of bcrypt must be in range 04-31');
            }
            $this->costs = sprintf('%1$02d', $numeric_costs);
        }
    }

Here is the call graph for this function:

Here is the caller graph for this function:

Field Documentation

$costs

string ilBcryptPhpPasswordEncoder::$costs = '08'

protected

Definition at line 28 of file class.ilBcryptPhpPasswordEncoder.php.

Referenced by getCosts().

---

The documentation for this class was generated from the following file:

• Services/Password/classes/encoders/class.ilBcryptPhpPasswordEncoder.php