![\"Saving](\"https:\/\/belvg.com\/blog\/wp-content\/uploads\/2018\/08\/joxi_screenshot_1535111596000.png\" "\\"Converting")
<\/a><\/p>\nThe idea behind it is to change the password hash obtained from the previous system into the native Magento one when we have access to the unhashed password, i.e. while logging in. To do this, create an observer using the controller_action_predispatch_customer_account_loginPost<\/em> event, which is called before the \\Magento\\Customer\\Controller\\Account\\LoginPost<\/em> controller. For this purpose we should create a new module, and inside it — the \/app\/code\/YourVendor\/PasswordHashConverter\/etc\/events.xml<\/em> file:<\/p>\n Take your online store to the next level with BelVG Magento Audit<\/p>Visit the page<\/span><\/a><\/div><\/div><\/div>\n Besides that, we will need to compare the password entered by a customer with the original hash from WordPress. We do it with the help of the Portable PHP hash framework<\/a>, used in WordPress for these purposes. Save it to our module as \/app\/code\/YourVendor\/PasswordHashConverter\/PasswordHash.php.<\/em> For further use in our code, write it to \/app\/code\/YourVendor\/etc\/di.xml<\/em>, specifying its signature of the two received parameters: iteration_count_log2<\/em> and portable_hashes<\/em>:<\/p>\n It only remains to create an observer that will implement the functionality we need.<\/p>\n \/app\/code\/YourVendor\/PasswordHashConverter\/Observer\/UpgradeCustomerPasswordObserver.php:<\/em><\/p>\n The Observer checks if the password matches the old hash from WordPress, and if it finds one, it converts the password to the Magento format. If the match is not found (we have already changed the hash to a new one, or simply entered a wrong password), our observer will not do anything (the catch block in its implementation is left empty for this purpose). The native Magento mechanism for validating the login and password will be launched after the execution of our code, and thus the authorization will be completed as usual.<\/p>\n Take your online store to the next level with BelVG Magento Custom Development <\/p>Visit the page<\/span><\/a><\/div><\/div><\/div>\n As a result, for all imported and logged users the password will be encrypted according to the Magento standards, and will not differ from the newly registered ones:<\/p>\n<?xml version=\"1.0\"?>\r\n<config xmlns:xsi=\"http:\/\/www.w3.org\/2001\/XMLSchema-instance\" xsi:noNamespaceSchemaLocation=\"urn:magento:framework:Event\/etc\/events.xsd\">\r\n <event name=\"controller_action_predispatch_customer_account_loginPost\">\r\n <observer name=\"customer_upgrade_password\" instance=\"YourVendor\/PasswordHashConverter\\Observer\\UpgradeCustomerPasswordObserver\" \/>\r\n <\/event>\r\n<\/config><\/pre>\n
Magento Audit<\/h3>
<?xml version=\"1.0\"?>\r\n<config xmlns:xsi=\"http:\/\/www.w3.org\/2001\/XMLSchema-instance\" xsi:noNamespaceSchemaLocation=\"urn:magento:framework:ObjectManager\/etc\/config.xsd\">\r\n <type name=\"YourVendor\/PasswordHashConverter\\PasswordHash\">\r\n <arguments>\r\n <argument name=\"iteration_count_log2\" xsi:type=\"number\">8<\/argument>\r\n <argument name=\"portable_hashes\" xsi:type=\"boolean\">true<\/argument>\r\n <\/arguments>\r\n <\/type>\r\n<\/config><\/pre>\n
<?php\r\nnamespace YourVendor\/PasswordHashConverter\\Observer;\r\nuse Magento\\Framework\\Event\\ObserverInterface;\r\nuse Magento\\Customer\\Model\\ResourceModel\\CustomerRepository;\r\nuse Magento\\Customer\\Model\\CustomerRegistry;\r\nuse YourVendor\/PasswordHashConverter\\PasswordHash;\r\nclass UpgradeCustomerPasswordObserver implements ObserverInterface\r\n{\r\n \/**\r\n * Encryption model\r\n *\r\n * @var EncryptorInterface\r\n *\/\r\n protected $encryptor;\r\n \/** @var \\BelVG\\Encryption\\PasswordHash class from WordPress *\/\r\n protected $WpPasswordHasher;\r\n \/**\r\n * @var CustomerRegistry\r\n *\/\r\n protected $customerRegistry;\r\n \/**\r\n * @var CustomerRepository\r\n *\/\r\n protected $customerRepository;\r\n public function __construct(\r\n EncryptorInterface $encryptor,\r\n CustomerRegistry $customerRegistry,\r\n CustomerRepository $customerRepository,\r\n PasswordHash $WpPasswordHasher\r\n ) {\r\n $this->encryptor = $encryptor;\r\n $this->WpPasswordHasher = $WpPasswordHasher;\r\n $this->customerRegistry = $customerRegistry;\r\n $this->customerRepository = $customerRepository;\r\n }\r\n \/**\r\n * Upgrade customer password hash when customer has logged in\r\n *\r\n * @param \\Magento\\Framework\\Event\\Observer $observer\r\n * @return void\r\n *\/\r\n public function execute(\\Magento\\Framework\\Event\\Observer $observer)\r\n {\r\n $requestParams = $observer->getEvent()->getData('request')->getParams();\r\n $username = $requestParams['login']['username'];\r\n $password = $requestParams['login']['password'];\r\n try {\r\n \/** @var \\Magento\\Customer\\Api\\Data\\CustomerInterface *\/\r\n $customer = $this->customerRepository->get($username);\r\n $customerSecure = $this->customerRegistry->retrieveSecureData($customer->getId());\r\n $hash = $customerSecure->getPasswordHash();\r\n if ($this->WpPasswordHasher->CheckPassword($password, $hash)) {\r\n $customerSecure->setPasswordHash($this->encryptor->getHash($password, true));\r\n $this->customerRepository->save($customer);\r\n }\r\n } catch (\\Exception $e) {\r\n }\r\n }\r\n}<\/pre>\nMagento Custom Development<\/h3>