Pfthb

I wanted to learn Laravel, and to do so, I wanted to link my Discord bot to a monitoring website.

The user can set up a password, using a command on Discord, that is encrypted using Bcrypt (with the bcrypt npm package).

My goal is to provide a web page in which the user can enter his client ID and his previously set up password to login, then have access to some basic functionalities to manage the servers he's moderator on.

I have the following login page:

<div class="panel">
 <h1 class="title">Get connected !</h1>
 <h2 class="detail">Login and manage your servers !</h2>
 <form method="POST" action=" route('login') ">
 @csrf

 <label for="id" class="label">Client id :</label>
 <input type="text" placeholder="Client id" name="id" value=" old('id') " autofocus>
 <label for="password" class="label">Password :</label>
 <input type="password" placeholder="Password" name="password">

 <input type="submit" value=" __('Login') ">
 </form>
</div>

@if (count($errors) > 0)
 <div class="form-error">
 <span class="label">Your email and/or password isn't correct.</span>
 </div>
@endif

Also, here is my User class:

class User extends Authenticatable

 use Notifiable;

 /**
 * The attributes that are mass assignable.
 *
 * @var array
 */
 protected $fillable = [
 'id', 'password',
 ];

 /**
 * The attributes that should be hidden for arrays.
 *
 * @var array
 */
 protected $hidden = [
 'password'
 ];

My users table has three columns:

• id (which is the client id on Discord)


• xp (integer)


• password (of Blob type, to store the bcrypt encrypted password)

Because I'm using the default authentication system, I just wrote the username function in app/Http/Controllers/Auth/LoginController.php:

public function username()

 return "id";

That system doesn't work and I don't know why, as I've just started learning Laravel. I was thinking of an encryption issue, but Laravel seem to be using Bcrypt too.

EDIT

I don't have php errors, but when I try to login, I'm being told that my credentials are wrong.

I changed the password type from Blob to Varchar and the username function to a variable like:

protected $username = "id"

EDIT 2
My laravel version is 5.7.13.

I tried adding the table name in my User model but it still doesn't work.

About the way I'm creating my users, it's not done using php but Javascript, as you're only supposed to have the possibility to register if you're on a Discord server that has my bot in it.

When the register command is triggered by a user, the following function is called on my database:

CREATE DEFINER=`root`@`localhost` FUNCTION `addUser`(user_id VARCHAR(18), server_id VARCHAR(18)) RETURNS tinyint(1) DETERMINISTIC
BEGIN

IF((SELECT COUNT(id) FROM (SELECT * FROM servers WHERE id=server_id) AS a) = 0) THEN 
 INSERT INTO servers VALUES (server_id);
 INSERT INTO aremembersof VALUES ("notregistered", 3, server_id);
END IF;
IF((SELECT COUNT(id) FROM (SELECT * FROM users WHERE id=user_id) AS a) = 0) THEN 
 INSERT INTO users VALUES (user_id); 
END IF;

IF ((SELECT COUNT(id) FROM (SELECT * FROM aremembersof WHERE id_servers=server_id AND id=user_id) AS a) = 0) THEN 
 INSERT INTO aremembersof VALUES (user_id, 2, server_id); 
ELSE
 RETURN false;
END IF;

RETURN true;

END

No password is set when the user first registers. This can seem strange but the password is only used to log in the management website. To define a password, the user has to call the setPassword command, which code is:

if(args.length > 0)
 bcrypt.hash(args[0], 0, async (err, hash) => 
 await dbUtilities.execute("UPDATE users SET password = "" + hash + "" WHERE id = "" + message.author.id + """);
 message.reply(embed: 
 color: parseInt(colors.success, 16),
 description: "Your password has been changed!"
 );
 );

 return;


message.reply(embed: 
 color: parseInt(colors.danger, 16),
 description: "You have to specify a password!"
);

Actually some other checks are done in order to verify the user is not setting his new password from a public channel but it's not relevant here.

Also, args[0] corresponds to the password typed by the user.

EDIT 3

As suggested, I changed my system so that the password has to be set on the website directly. Thus, the setPassword command sets a token that is used on the website on an activation page.
Here is the function called when submitting the form:

public function activatePost(Request $request)
confirmed'
 ]);

 $password_reset = PasswordReset::where('token', $request->token)->first();

 if($password_reset != null)
 
 $user = User::where('id', $password_reset->id)->first();
 $user->password = Hash::make($request->password);
 $user->save();

 return redirect()->route('login')->with('message', 'Your password has been set!');
 
 else 
 // TODO
 

I still can't connect.