Skip to content

Commit

Permalink
[symfony/security-bundle] set default algorithm to plaintext
Browse files Browse the repository at this point in the history
  • Loading branch information
JohJohan committed Feb 11, 2025
1 parent 2d8f656 commit 76af645
Showing 1 changed file with 7 additions and 6 deletions.
13 changes: 7 additions & 6 deletions symfony/security-bundle/6.4/config/packages/security.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -30,10 +30,11 @@ when@test:
password_hashers:
# By default, password hashers are resource intensive and take time. This is
# important to generate secure password hashes. In tests however, secure hashes
# are not important, waste resources and increase test times. The following
# reduces the work factor to the lowest possible values.
# are not important, waste resources and increase test times.
Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface:
algorithm: auto
cost: 4 # Lowest possible value for bcrypt
time_cost: 3 # Lowest possible value for argon
memory_cost: 10 # Lowest possible value for argon
algorithm: plaintext # disable hashing all together
# You can also use the following configuration to use the lowest possible values for bcrypt and argon:
# algorithm: auto
# cost: 4 # Lowest possible value for bcrypt
# time_cost: 3 # Lowest possible value for argon
# memory_cost: 10 # Lowest possible value for argon

0 comments on commit 76af645

Please sign in to comment.