Hash token guard credentials during validation

Author: Nipun404

src/Illuminate/Auth/TokenGuard.php

@@ -114,7 +114,11 @@ public function validate(array $credentials = [])
             return false;
         }
 
-        $credentials = [$this->storageKey => $credentials[$this->inputKey]];
+        $credentials = [
+            $this->storageKey => $this->hash
+                ? hash('sha256', $credentials[$this->inputKey])
+                : $credentials[$this->inputKey],
+        ];
 
         return (bool) $this->provider->retrieveByCredentials($credentials);
     }

tests/Auth/AuthTokenGuardTest.php

@@ -85,6 +85,19 @@ public function testValidateCanDetermineIfCredentialsAreValid()
         $this->assertTrue($guard->validate(['api_token' => 'foo']));
     }
 
+    public function testValidateCanDetermineIfHashedCredentialsAreValid()
+    {
+        $provider = m::mock(UserProvider::class);
+        $user = new AuthTokenGuardTestUser;
+        $user->id = 1;
+        $provider->shouldReceive('retrieveByCredentials')->once()->with(['api_token' => hash('sha256', 'foo')])->andReturn($user);
+        $request = Request::create('/', 'GET', ['api_token' => 'foo']);
+
+        $guard = new TokenGuard($provider, $request, 'api_token', 'api_token', $hash = true);
+
+        $this->assertTrue($guard->validate(['api_token' => 'foo']));
+    }
+
     public function testValidateCanDetermineIfCredentialsAreInvalid()
     {
         $provider = m::mock(UserProvider::class);

tests/Integration/Auth/TokenGuardAuthenticationTest.php

@@ -0,0 +1,49 @@
+<?php
+
+namespace Illuminate\Tests\Integration\Auth;
+
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Illuminate\Support\Facades\Schema;
+use Illuminate\Tests\Integration\Auth\Fixtures\AuthenticationTestUser;
+use Orchestra\Testbench\Attributes\WithMigration;
+use Orchestra\Testbench\TestCase;
+
+#[WithMigration]
+class TokenGuardAuthenticationTest extends TestCase
+{
+    use RefreshDatabase;
+
+    protected function defineEnvironment($app)
+    {
+        $app['config']->set([
+            'auth.guards.api' => [
+                'driver' => 'token',
+                'provider' => 'users',
+                'hash' => true,
+            ],
+            'auth.providers.users.model' => AuthenticationTestUser::class,
+        ]);
+    }
+
+    protected function afterRefreshingDatabase()
+    {
+        Schema::table('users', function (Blueprint $table) {
+            $table->string('api_token')->nullable();
+        });
+    }
+
+    public function testTokenGuardValidateAuthenticatesHashedApiTokens()
+    {
+        AuthenticationTestUser::create([
+            'name' => 'Token User',
+            'email' => 'token@example.com',
+            'password' => 'password',
+            'api_token' => hash('sha256', 'plain-token'),
+        ]);
+
+        $this->assertTrue($this->app['auth']->guard('api')->validate([
+            'api_token' => 'plain-token',
+        ]));
+    }
+}