Filament•8mo ago

Invite user and wrong credential

I have implemented an invitation workflow to send an invite to my customers and request them to insert a new password. When the user accepts the invite, I have this function to update the password.

 
 public function create(): void
    {
        $this->invitationModel = UserInvitation::find($this->invitation);
        $user = User::where('email', $this->invitationModel->email)->first();
        $user->update([
            'password' => Hash::make($this->form->getState()['password']),
            'email_verified_at' => now(),

        ]);

        auth()->login($user);
        $this->invitationModel->delete();
        $this->redirect('/customer');
    }

 
 public function create(): void
    {
        $this->invitationModel = UserInvitation::find($this->invitation);
        $user = User::where('email', $this->invitationModel->email)->first();
        $user->update([
            'password' => Hash::make($this->form->getState()['password']),
            'email_verified_at' => now(),

        ]);

        auth()->login($user);
        $this->invitationModel->delete();
        $this->redirect('/customer');
    }

For some reason, after setting up a new password, the user can't log in. However, if the user recovers the password, they are able to log in. I suspect there is an issue with hashing the password when the user responds to an invite.

Solution:

You double hashed the password

Jump to solution

6 Replies

SoundmitOP•8mo ago

message.txt

Solution

MohamedSabil83•8mo ago

You double hashed the password

SoundmitOP•8mo ago

double hashed... yep found just after made the post 🙂 thanks!!

MohamedSabil83•8mo ago

@Soundmit don't forget to set Mark Solution

SoundmitOP•8mo ago

yes, in the same function the password is updated the email_verified_at not

 
public function create(): void
    {
        $this->invitationModel = UserInvitation::find($this->invitation);
        $user = User::where('email', $this->invitationModel->email)->first();
        $user->update([
            'password' => $this->form->getState()['password'],
            'email_verified_at' => 'now()',

        ]);
       
        auth()->login($user);
        $this->invitationModel->delete();
        $this->redirect('/customer');
    }

 
public function create(): void
    {
        $this->invitationModel = UserInvitation::find($this->invitation);
        $user = User::where('email', $this->invitationModel->email)->first();
        $user->update([
            'password' => $this->form->getState()['password'],
            'email_verified_at' => 'now()',

        ]);
       
        auth()->login($user);
        $this->invitationModel->delete();
        $this->redirect('/customer');
    }

how can i set mark solution?

MohamedSabil83•8mo ago

Typo, now() not 'now()' Right click on the message that provide the solution, from menu go to App, and from side menu click Mark Solution

Gaming

Programming

Invite user and wrong credential