Bug: Not able to login in after hit update

[dominikgeimer]

Hello,

I think I found a bug. If you go to your Profile and just hit update without changing anything and you log out, you are not able to login again because it says "These credentials do not match our records. "

Greets Dominik

[patrickbergman]

Hi,

Sorry for the late reply, Currently the package is using bcrypt to encrypt the password when it is submitted. Do you use another type of encrypting? And do you know of any method of laravel that takes the configured encryption?

[Sagital]

I think the problem is that is assumes that you always want to change the password even if you just want to change your name. So if you don't type anything in the password field it will reset your password to an unknown (empty) value. This should probably be fixed to check if the password is empty

[estaticfear]

I think the problem is that is assumes that you always want to change the password even if you just want to change your name. So if you don't type anything in the password field it will reset your password to an unknown (empty) value. This should probably be fixed to check if the password is empty

You are right, please fix it.

[OmarHrra]

Same problem

[MiltonD29]

Same problem...

[Gummibeer]

The problem is that request()->has('password') is always true. So it crypts null that changes the password hash in the DB.

[JeasonZuo]

You can add this function into User model to fix this issue

public function setPasswordAttribute($value) {
    if (!Hash::check(null, $value)) {
        $this->attributes['password'] = $value;
    }
}