Hachage (Hashing)

# .env
HASH_DRIVER=bcrypt  # bcrypt / argon / argon2id

php artisan config:publish hashing

<?php

namespace App\Http\Controllers;

use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;

class PasswordController extends Controller
{
    public function update(Request $request): RedirectResponse
    {
        $request->validate([
            'password' => ['required', 'min:8', 'confirmed'],
        ]);

        $request->user()->fill([
            'password' => Hash::make($request->password),
        ])->save();

        return redirect('/profile');
    }
}

$hashed = Hash::make('plain-text-password', [
    'rounds' => 14,
]);

$hashed = Hash::make('plain-text-password', [
    'memory'  => 65536, // en KiB
    'time'    => 4,
    'threads' => 2,
]);

use Illuminate\Support\Facades\Hash;

if (Hash::check($request->password, $user->password)) {
    // Le mot de passe correspond
} else {
    // Le mot de passe ne correspond pas
}

// Exemple : vérification du mot de passe actuel dans un formulaire de changement
if (! Hash::check($request->current_password, $request->user()->password)) {
    return back()->withErrors(['current_password' => 'Le mot de passe actuel est incorrect.']);
}

use Illuminate\Support\Facades\Hash;

if (Hash::needsRehash($user->password)) {
    $user->update([
        'password' => Hash::make($plainTextPassword),
    ]);
}

// Re-hachage dans le traitement de connexion
if (Auth::attempt($credentials)) {
    if (Hash::needsRehash(Auth::user()->password)) {
        Auth::user()->update([
            'password' => Hash::make($credentials['password']),
        ]);
    }

    return redirect()->intended('/dashboard');
}

# .env
HASH_VERIFY=false