Can you just verify that the second part of the getHash() response (440c5bfd2beacc722fa848a6b41331856b354a7df4a7a029edd7b3344478f383), after "sha256;" is the same as the user salt stored in table resource ?
If it is the same, it means that the encryption done on Javascript and done on PHP.
Authentication process compared result in php
value in PHP = hash("sha256", $user->$password.$sessionSalt) where $user->password, stored in DB is hash("sha256", $enteredPassWord.$user->salt)
value in JS = CryptoJS.SHA256(CryptoJS.SHA256(pwd + userSalt)+ sessionSalt)
So I would say that CryptoJS.SHA256() or PHP hash("sha256") does not work as expected (at least both don't give save result.
It's quite difficult to investigate to find why...
My problem is solved.
I was the one who started it.
When I installed (replacing my arch linux server in PHP 7.4), an ubuntu server (which I just updated to PHP 7.3), I resin installed the application from the original zip (downloaded from the projeqtor site).
I updated the settings and encountered the problems mentioned in this thread.
What I forgot is the plugs in... (FR translation and reports).
I just reinstalled from a copy of my arch linux server files (including the plugins) and it works... no more connection problems...
I confess I didn't think that these authentication problems could come from the fact that the plugins were not installed.
Maybe this experience can be useful to other people...
Thank you again for your help these last few days.
En poursuivant votre navigation, vous acceptez le dépôt de cookies tiers destinés au bon fonctionnement et à la sécurisation du site (gestion de session, reCaptcha) et à une analyse statistique anonymisée des accès sur notre site (Google Analytics). Si vous vous inscrivez, les informations que vous fournirez ne seront jamais divulguées à un tiers sous quelque forme que ce soit. En savoir plus
Cookies settings
×
Functional Cookies
Ce site utilise des cookies pour assurer son bon fonctionnement et ne peuvent pas être désactivés de nos systèmes. Nous ne les utilisons pas à des fins publicitaires. Si ces cookies sont bloqués, certaines parties du site ne pourront pas fonctionner.
Session
Please login to see yours activities!
Other cookies
Ce site web utilise un certain nombre de cookies pour gérer, par exemple, les sessions utilisateurs.