-
-
Notifications
You must be signed in to change notification settings - Fork 5.2k
Update recommended password encoder to "auto" #11767
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
1bdd1d8
to
5ca528f
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good job of searching through the whole documentation! I've left two comments to slightly modify some of the changes (while we recommend auto, we should not completely remove bcrypt imo).
@@ -280,12 +280,12 @@ password) so you don't have to deal with it. | |||
|
|||
.. _reference-security-bcrypt: | |||
|
|||
Using the BCrypt Password Encoder | |||
Using the "auto" Password Encoder |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Imho, we should keep this section, it is just talking about the BCrypt algorithm, and instead add a new section for the auto
password encoder.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The bcrypt encoder has been deprecated though. Also technically speaking auto
is not an encoder, it's only a possible value for the algorithm
config option which saves from having to choose between native
and sodium
. So I'm not fond of documenting it this way neither.
3e25cf2
to
fb21211
Compare
This PR was squashed before being merged into the 4.3 branch (closes #11767). Discussion ---------- Update recommended password encoder to "auto" |Q |A | |--- |---| |Branch |4.3| |Bug fix? |no | |New feature? |no | |BC breaks? |no | |Deprecations?|no | |Tests pass? |yes| |Fixed tickets|n/a| |License |MIT| See https://github.com/symfony/symfony/blob/v4.3.0/UPGRADE-4.3.md#securitybundle. Commits ------- fb21211 Update recommended password encoder to \"auto\"
Javier, thanks for this contribution! It's merged now. |
See https://github.com/symfony/symfony/blob/v4.3.0/UPGRADE-4.3.md#securitybundle.