# Login does not work, after a while

**URL:** <https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414>\
**Category:** Need Help\
**Created:** [July 26, 2019, 10:03am UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414 "2019-07-26T10:03:30Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![NeroNekro](https://avatars.discourse-cdn.com/v4/letter/n/c68b51/32.png) [@NeroNekro](https://discourse.cakephp.org/u/NeroNekro)\
**Post date:** [July 26, 2019, 10:03am UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/1 "2019-07-26T10:03:30Z")

</div>

Hi there,

i programming a new website with version 3.8.1 and at the beginning war everything fine. I had added the login and was working good. After some updates on my code and adding some new sites, the login doesnt work anymore. I can create a new account, but dont login.

I think, the system open no session.

With print\_r I get only the number 1:

> **login**
>
> public function login()  
> {  
> if ($this-\>request-\>is(‘post’)) {  
> print\_r($this-\>request-\>is(‘post’));  
> $user = $this-\>Auth-\>identify();  
> if ($user) {  
> $this-\>Auth-\>setUser($user);
> 
> ```
> return $this->redirect(['controller' => 'charactersheet', 'action' => 'index']);
> #return $this->redirect($this->Auth->redirectUrl());
> }
> $this->Flash->error('Your username or password is incorrect.');
> }
> }
> 
> ```

> **userstable**
>
> public function validationDefault(Validator $validator)  
> {  
> $validator  
> -\>nonNegativeInteger(‘id’)  
> -\>allowEmptyString(‘id’, null, ‘create’);
> 
> ```
> $validator
> ->scalar('username')
> ->maxLength('username', 256)
> ->allowEmptyString('username');
> 
> $validator
> ->scalar('password')
> ->maxLength('password', 256)
> ->allowEmptyString('password');
> 
> $validator
> ->email('email')
> ->allowEmptyString('email');
> $validator
> ->scalar('sprache')
> ->maxLength('sprache', 3)
> ->allowEmptyString('sprache');
> 
> $validator
> ->date('geburtstag')
> ->allowEmptyDate('geburtstag');
> $validator
> ->nonNegativeInteger('mod')
> ->allowEmptyString('mod', 0, 'create');
> 
> return $validator;
> }
> 
> /**
> * Returns a rules checker object that will be used for validating
> * application integrity.
> *
> * @param \Cake\ORM\RulesChecker $rules The rules object to be modified.
> * @return \Cake\ORM\RulesChecker
> */
> public function buildRules(RulesChecker $rules)
> {
> $rules->add($rules->isUnique(['email']));
> 
> return $rules;
> }
> 
> ```

> **user**
>
> protected $\_accessible = [  
> ‘username’ =\> true,  
> ‘password’ =\> true,  
> ‘email’ =\> true,  
> ‘sprache’ =\> true,  
> ‘geburtstag’ =\> true,  
> ‘mod’ =\> true  
> ];
> 
> ```
> /**
> * Fields that are excluded from JSON versions of the entity.
> *
> * @var array
> */
> protected $_hidden = [
> 'password'
> ];
> 
> protected function _setPassword($value)
> {
> if (strlen($value)) {
> $hasher = new DefaultPasswordHasher();
> 
> return $hasher->hash($value);
> }
> }
> 
> ```

> **appcontroller**
>
> public function initialize()  
> {  
> parent::initialize();
> 
> ```
> $this->loadComponent('RequestHandler', [
> 'enableBeforeRedirect' => false,
> ]);
> $this->loadComponent('Flash');
> 
> /*
> * Enable the following component for recommended CakePHP security settings.
> * see https://book.cakephp.org/3.0/en/controllers/components/security.html
> */
> #$this->loadComponent('Security');
> 
> $this->loadComponent('Auth', [
> 'authenticate' => [
> 'Form' => [
> 'fields' => [
> 'email' => 'email',
> 'password' => 'password'
> ]
> ]
> ],
> 'loginAction' => [
> 'controller' => 'Users',
> 'action' => 'login'
> ],
> // If unauthorized, return them to page they were just on
> 'unauthorizedRedirect' => $this->referer()
> ]);
> 
> // Allow the display action so our PagesController
> // continues to work. Also enable the read only actions.
> $this->Auth->allow(['display', 'login', 'impressum', 'datenschutz', 'aboutus', 'kontakt', 'home']);
> 
> }
> 
> ```

what have I done wrong?  
Thanks for your help

---

<div class="post-metadata">

**Author:** ![Graziel](https://avatars.discourse-cdn.com/v4/letter/g/71c47a/32.png) [@Graziel](https://discourse.cakephp.org/u/Graziel)\
**Post date:** [July 26, 2019, 11:22am UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/2 "2019-07-26T11:22:22Z")

</div>

in `authenticate fields` are `username/password` not `email/password`  
[https://book.cakephp.org/3.0/en/controllers/components/authentication.html#configuring-authentication-handlers](https://book.cakephp.org/3.0/en/controllers/components/authentication.html#configuring-authentication-handlers)

> - `fields` The fields to use to identify a user by. You can use keys `username` and `password` to specify your username and password fields respectively.

also note that Auth component will be depracated in 4.0

---

<div class="post-metadata">

**Author:** ![NeroNekro](https://avatars.discourse-cdn.com/v4/letter/n/c68b51/32.png) [@NeroNekro](https://discourse.cakephp.org/u/NeroNekro)\
**Post date:** [July 26, 2019, 12:47pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/3 "2019-07-26T12:47:26Z")

</div>

Thanks.

It’s the result of experimenting. Corrected it again.

If I log in now nothing happens. I don’t even get an error message that my password or similar is wrong. So apparently it doesn’t even call the usercontroller.

Also don’t see any error in the error.log or similar.

> **Appcontroller**
>
> $this-\>loadComponent(‘Auth’, [  
> ‘authenticate’ =\> [  
> ‘Form’ =\> [  
> ‘fields’ =\> [  
> ‘username’ =\> ‘username’,  
> ‘password’ =\> ‘password’  
> ]  
> ]  
> ],  
> ‘loginAction’ =\> [  
> ‘controller’ =\> ‘Users’,  
> ‘action’ =\> ‘login’  
> ],  
> // If unauthorized, return them to page they were just on  
> ‘unauthorizedRedirect’ =\> $this-\>referer()  
> ]);

---

<div class="post-metadata">

**Author:** ![Graziel](https://avatars.discourse-cdn.com/v4/letter/g/71c47a/32.png) [@Graziel](https://discourse.cakephp.org/u/Graziel)\
**Post date:** [July 26, 2019, 1:31pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/4 "2019-07-26T13:31:32Z")

</div>

1. how do you check if user is logged?
2. show view/template for login form

---

<div class="post-metadata">

**Author:** ![NeroNekro](https://avatars.discourse-cdn.com/v4/letter/n/c68b51/32.png) [@NeroNekro](https://discourse.cakephp.org/u/NeroNekro)\
**Post date:** [July 26, 2019, 4:27pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/5 "2019-07-26T16:27:04Z")

</div>

1. 

 \<?php if ($this-\>getRequest()-\>getSession()-\>read('Auth.User.username')) : ?\>

I cant open any other site. The site redirect me to the login. I don’t know what I changed in the last days, so that the login doesn’t work anymore.

1. 

> **login temp**
>
> \<?= $this-\>Html-\>css('login.css') ?\>
> 
> Sign In \<?= $this-\>Html-\>link( 'SIGN UP', ['controller' =\> 'users', 'action' =\> 'add', '\_full' =\> true] ); ?\> 
> \<?= $this-\>Form-\>create() ?\> 
> 
> Email \<?= $this-\>Form-\>control('username', ['class' =\> 'input', 'required' =\> true]) ?\> 
> 
> Password \<?= $this-\>Form-\>control('password', ['class' =\> 'input', 'required' =\> true]) ?\> 
> 
> Keep me Signed in 
> 
> \<?= $this-\>Form-\>button('Login', ['class' =\> 'button']) ?\>
> 
> ```
> </div>
> <div class="hr"></div>
> <div class="foot-lnk">
> <a href="#forgot">Forgot Password?</a>
> </div>
> <?= $this->Form->end() ?>
> </div>
> 
> </div>
> </div>
> 
> ```

---

<div class="post-metadata">

**Author:** ![Graziel](https://avatars.discourse-cdn.com/v4/letter/g/71c47a/32.png) [@Graziel](https://discourse.cakephp.org/u/Graziel)\
**Post date:** [July 26, 2019, 5:33pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/6 "2019-07-26T17:33:58Z")

</div>

try setting `authorize` to `false` to disable check for permissions or

```auto
'authorize' => 'Controller',

```

and in `AppController

```auto
public function isAuthorized($user = null)
{
    return true;
}

```

to pass anyone whos logged

---

<div class="post-metadata">

**Author:** ![NeroNekro](https://avatars.discourse-cdn.com/v4/letter/n/c68b51/32.png) [@NeroNekro](https://discourse.cakephp.org/u/NeroNekro)\
**Post date:** [July 26, 2019, 7:16pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/7 "2019-07-26T19:16:26Z")

</div>

Where does this part go? -\> ‘authorize’ =\> ‘Controller’,

---

<div class="post-metadata">

**Author:** ![Graziel](https://avatars.discourse-cdn.com/v4/letter/g/71c47a/32.png) [@Graziel](https://discourse.cakephp.org/u/Graziel)\
**Post date:** [July 26, 2019, 8:35pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/8 "2019-07-26T20:35:10Z")

</div>

[https://book.cakephp.org/3.0/en/controllers/components/authentication.html#using-controllerauthorize](https://book.cakephp.org/3.0/en/controllers/components/authentication.html#using-controllerauthorize)

---

<div class="post-metadata">

**Author:** ![NeroNekro](https://avatars.discourse-cdn.com/v4/letter/n/c68b51/32.png) [@NeroNekro](https://discourse.cakephp.org/u/NeroNekro)\
**Post date:** [July 26, 2019, 8:47pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/9 "2019-07-26T20:47:12Z")

</div>

I’m sorry, it doesn’t help. Before it worked without the customizations. I only added new pages in the last days and some under $this-\>Auth-\>allow. But undoing them doesn’t help either.

---

<div class="post-metadata">

**Author:** ![Graziel](https://avatars.discourse-cdn.com/v4/letter/g/71c47a/32.png) [@Graziel](https://discourse.cakephp.org/u/Graziel)\
**Post date:** [July 27, 2019, 1:00pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/10 "2019-07-27T13:00:48Z")

</div>

in the `AppController::initialize` try adding `dd($this->Auth->user());` at the bottom after trying to login in

---

<div class="post-metadata">

**Author:** ![NeroNekro](https://avatars.discourse-cdn.com/v4/letter/n/c68b51/32.png) [@NeroNekro](https://discourse.cakephp.org/u/NeroNekro)\
**Post date:** [July 28, 2019, 12:42pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/11 "2019-07-28T12:42:59Z")

</div>

> [@Graziel](#):
>
> `dd($this->Auth->user());`

I got the message null.

---

<div class="post-metadata">

**Author:** ![Graziel](https://avatars.discourse-cdn.com/v4/letter/g/71c47a/32.png) [@Graziel](https://discourse.cakephp.org/u/Graziel)\
**Post date:** [July 28, 2019, 1:26pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/12 "2019-07-28T13:26:15Z")

</div>

hmm from what you have posted up to this point your code looks ok

whats length of your password field in database? IIRC it should be \> 62 or even 255 for future proof

---

<div class="post-metadata">

**Author:** ![NeroNekro](https://avatars.discourse-cdn.com/v4/letter/n/c68b51/32.png) [@NeroNekro](https://discourse.cakephp.org/u/NeroNekro)\
**Post date:** [July 28, 2019, 1:42pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/13 "2019-07-28T13:42:28Z")

</div>

It is VARCHAR(256)

Have cakephp some logger for more details?

---

<div class="post-metadata">

**Author:** ![Graziel](https://avatars.discourse-cdn.com/v4/letter/g/71c47a/32.png) [@Graziel](https://discourse.cakephp.org/u/Graziel)\
**Post date:** [July 28, 2019, 2:52pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/14 "2019-07-28T14:52:58Z")

</div>

yup but it logs only errors and warnings, you can enable query log in `app.php`

---

<div class="post-metadata">

**Author:** ![NeroNekro](https://avatars.discourse-cdn.com/v4/letter/n/c68b51/32.png) [@NeroNekro](https://discourse.cakephp.org/u/NeroNekro)\
**Post date:** [July 28, 2019, 6:08pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/15 "2019-07-28T18:08:11Z")

</div>

Query works fine and get data.

> **logs**
>
> 2019-07-28 18:46:05 Debug: duration=26 rows=1 SELECT Users.id AS `Users __id`, Users.username AS `Users__ username`, Users.password AS `Users __password`, Users.email AS `Users__ email`, Users.sprache AS `Users __sprache`, Users.geburtstag AS `Users__ geburtstag` FROM users Users WHERE Users.username = ‘test’ LIMIT 1
> 
> #0 \vendor\cakephp\cakephp\src\Http\ActionDispatcher.php(120): Cake\Controller\Controller-\>invokeAction()  
> #1 \vendor\cakephp\cakephp\src\Http\ActionDispatcher.php(94): Cake\Http\ActionDispatcher-\>\_invoke(Object(App\Controller\UsersController))  
> #2 \vendor\cakephp\cakephp\src\Http\BaseApplication.php(235): Cake\Http\ActionDispatcher-\>dispatch(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response))  
> #3 \vendor\cakephp\cakephp\src\Http\Runner.php(65): Cake\Http\BaseApplication-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response), Object(Cake\Http\Runner))  
> #4 \vendor\cakephp\cakephp\src\Http\Runner.php(65): Cake\Http\Runner-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response), Object(Cake\Http\Runner))  
> #5 \vendor\cakephp\cakephp\src\Http\Middleware\CsrfProtectionMiddleware.php(123): Cake\Http\Runner-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response))  
> #6 \vendor\cakephp\cakephp\src\Http\Runner.php(65): Cake\Http\Middleware\CsrfProtectionMiddleware-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response), Object(Cake\Http\Runner))  
> #7 \vendor\cakephp\cakephp\src\Http\Runner.php(51): Cake\Http\Runner-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response))  
> #8 \vendor\cakephp\cakephp\src\Routing\Middleware\RoutingMiddleware.php(168): Cake\Http\Runner-\>run(Object(Cake\Http\MiddlewareQueue), Object(Cake\Http\ServerRequest), Object(Cake\Http\Response))  
> #9 \vendor\cakephp\cakephp\src\Http\Runner.php(65): Cake\Routing\Middleware\RoutingMiddleware-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response), Object(Cake\Http\Runner))  
> #10 \vendor\cakephp\cakephp\src\Routing\Middleware\AssetMiddleware.php(97): Cake\Http\Runner-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response))  
> #11 \vendor\cakephp\cakephp\src\Http\Runner.php(65): Cake\Routing\Middleware\AssetMiddleware-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response), Object(Cake\Http\Runner))  
> #12 \vendor\cakephp\cakephp\src\Error\Middleware\ErrorHandlerMiddleware.php(96): Cake\Http\Runner-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response))  
> #13 \vendor\cakephp\cakephp\src\Http\Runner.php(65): Cake\Error\Middleware\ErrorHandlerMiddleware-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response), Object(Cake\Http\Runner))  
> #14 \vendor\cakephp\debug\_kit\src\Middleware\DebugKitMiddleware.php(53): Cake\Http\Runner-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response))  
> #15 \vendor\cakephp\cakephp\src\Http\Runner.php(65): DebugKit\Middleware\DebugKitMiddleware-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response), Object(Cake\Http\Runner))  
> #16 \vendor\cakephp\cakephp\src\Http\Runner.php(51): Cake\Http\Runner-\>\_\_invoke(Object(Cake\Http\ServerRequest), Object(Cake\Http\Response))  
> #17 \vendor\cakephp\cakephp\src\Http\Server.php(98): Cake\Http\Runner-\>run(Object(Cake\Http\MiddlewareQueue), Object(Cake\Http\ServerRequest), Object(Cake\Http\Response))  
> #18 \webroot\index.php(40): Cake\Http\Server-\>run()  
> #19 {main}  
> Request URL: /users/img/background.jpg  
> Referer URL: [http://localhost/users/login?redirect=%2Fcharactersheet](http://localhost/users/login?redirect=%2Fcharactersheet)

---

<div class="post-metadata">

**Author:** ![NeroNekro](https://avatars.discourse-cdn.com/v4/letter/n/c68b51/32.png) [@NeroNekro](https://discourse.cakephp.org/u/NeroNekro)\
**Post date:** [July 28, 2019, 6:12pm UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/16 "2019-07-28T18:12:49Z")

</div>

Found it…

The Session config in app.php was the problem.

Thanks for your help and have a nice evening.

---

<div class="post-metadata">

**Author:** ![nik55](https://avatars.discourse-cdn.com/v4/letter/n/ac8455/32.png) [@nik55](https://discourse.cakephp.org/u/nik55)\
**Post date:** [July 30, 2019, 6:23am UTC](https://discourse.cakephp.org/t/login-does-not-work-after-a-while/6414/17 "2019-07-30T06:23:20Z")

</div>

Query works fine, try once more [🤨](http://bit.ly/2UD9lTK)