Symfony: ์†Œ๊ธˆ์ด ์—†๋Š” BCryptPasswordEncoder

์— ๋งŒ๋“  2016๋…„ 11์›” 02์ผ  ยท  3์ฝ”๋ฉ˜ํŠธ  ยท  ์ถœ์ฒ˜: symfony/symfony

์•ˆ๋…•ํ•˜์„ธ์š” ์‹ฌํฌ๋‹ˆ ์ปค๋ฎค๋‹ˆํ‹ฐ์ž…๋‹ˆ๋‹ค. BCryptPasswordEncoder์—์„œ ์†Œ๊ธˆ์„ ์‚ฌ์šฉํ•˜์ง€ ์•Š๋Š” ์ด์œ ๋ฅผ ๋ชจ๋ฅด๊ฒ ์Šต๋‹ˆ๋‹ค. ๋‚ด ์‘์šฉ ํ”„๋กœ๊ทธ๋žจ์˜ ๋ณด์•ˆ์ด ๋งค์šฐ ์ค‘์š”ํ•˜๊ธฐ ๋•Œ๋ฌธ์— ์ด ์งˆ๋ฌธ์— ๋Œ€ํ•œ ๋‹ต๋ณ€์„ ์ œ๊ณตํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๊นŒ?

https://github.com/symfony/symfony/blob/master/src/Symfony/Component/Security/Core/Encoder/BCryptPasswordEncoder.php

if ($salt) { // Ignore $salt, the auto-generated one is always the best }

๊ฐ€์žฅ ์œ ์šฉํ•œ ๋Œ“๊ธ€

@FRAGnatt pelase ๊ทธ๋Ÿฐ ๋ง ํ•˜์ง€ ๋งˆ์„ธ์š”. ์ „ํ˜€ ๋ฌด๋Šฅํ•˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ๊ท€ํ•˜์˜ ์งˆ๋ฌธ์€ ์™„์ „ํžˆ ํ•ฉ๋ฒ•์ ์ž…๋‹ˆ๋‹ค. Bcrypt๋ฅผ ์ฒ˜์Œ ๋ณด์•˜์„ ๋•Œ์™€ ๋˜‘๊ฐ™์€ ๊ฒƒ์ด ๊ถ๊ธˆํ–ˆ์Šต๋‹ˆ๋‹ค.

๋ชจ๋“  3 ๋Œ“๊ธ€

๊ทธ ์ด์œ ๋Š” Bcrypt๊ฐ€ ์ž์ฒด์ ์œผ๋กœ ์ƒ์„ฑ๋œ ์†”ํŠธ๋ฅผ ํฌํ•จํ•˜๊ธฐ ๋•Œ๋ฌธ์ž…๋‹ˆ๋‹ค. ๊ฒŒ๋‹ค๊ฐ€ ์†Œ๊ธˆ์€ ์—ฌ๊ธฐ์— ์„ค๋ช…๋œ ๋Œ€๋กœ PHP 7.0๋ถ€ํ„ฐ ๋” ์ด์ƒ ์‚ฌ์šฉ๋˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. http://php.net/manual/en/function.password-hash.php

๊ดœ์ฐฎ์•„. ์ œ ๋ฌด๋Šฅํ•ด์„œ ์ฃ„์†กํ•ฉ๋‹ˆ๋‹ค. ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค

@FRAGnatt pelase ๊ทธ๋Ÿฐ ๋ง ํ•˜์ง€ ๋งˆ์„ธ์š”. ์ „ํ˜€ ๋ฌด๋Šฅํ•˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ๊ท€ํ•˜์˜ ์งˆ๋ฌธ์€ ์™„์ „ํžˆ ํ•ฉ๋ฒ•์ ์ž…๋‹ˆ๋‹ค. Bcrypt๋ฅผ ์ฒ˜์Œ ๋ณด์•˜์„ ๋•Œ์™€ ๋˜‘๊ฐ™์€ ๊ฒƒ์ด ๊ถ๊ธˆํ–ˆ์Šต๋‹ˆ๋‹ค.

์ด ํŽ˜์ด์ง€๊ฐ€ ๋„์›€์ด ๋˜์—ˆ๋‚˜์š”?
0 / 5 - 0 ๋“ฑ๊ธ‰