Fix credentials check (#45437)

laravel · Dec 27, 2022 · 7fdacd9 · 7fdacd9
1 parent 8cf394e
commit 7fdacd9
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/Illuminate/Auth/EloquentUserProvider.php b/src/Illuminate/Auth/EloquentUserProvider.php
@@ -148,7 +148,9 @@ public function retrieveByCredentials(array $credentials)
      */
     public function validateCredentials(UserContract $user, array $credentials)
     {
-        $plain = $credentials['password'];
+        if (is_null($plain = $credentials['password'])) {
+            return false;
+        }
 
         return $this->hasher->check($plain, $user->getAuthPassword());
     }