雜湊（Hashing）

# .env
HASH_DRIVER=bcrypt  # bcrypt / argon / argon2id

php artisan config:publish hashing

<?php

namespace App\Http\Controllers;

use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;

class PasswordController extends Controller
{
    public function update(Request $request): RedirectResponse
    {
        $request->validate([
            'password' => ['required', 'min:8', 'confirmed'],
        ]);

        $request->user()->fill([
            'password' => Hash::make($request->password),
        ])->save();

        return redirect('/profile');
    }
}

$hashed = Hash::make('plain-text-password', [
    'rounds' => 14,
]);

$hashed = Hash::make('plain-text-password', [
    'memory'  => 65536, // 單位 KiB
    'time'    => 4,
    'threads' => 2,
]);

use Illuminate\Support\Facades\Hash;

if (Hash::check($request->password, $user->password)) {
    // 密碼相符
} else {
    // 密碼不符
}

// 在變更密碼表單中確認目前密碼的範例
if (! Hash::check($request->current_password, $request->user()->password)) {
    return back()->withErrors(['current_password' => '目前的密碼不正確。']);
}

use Illuminate\Support\Facades\Hash;

if (Hash::needsRehash($user->password)) {
    $user->update([
        'password' => Hash::make($plainTextPassword),
    ]);
}

// 在登入處理中執行重新雜湊
if (Auth::attempt($credentials)) {
    if (Hash::needsRehash(Auth::user()->password)) {
        Auth::user()->update([
            'password' => Hash::make($credentials['password']),
        ]);
    }

    return redirect()->intended('/dashboard');
}

# .env
HASH_VERIFY=false