OXID Password-Encoder

by GOLLE IT

Rating: no rating ( write a review )

Downloads: <50

✔︎ Enhances Shopware with the ability to use user-passwords imported from OXID eSales. Support salt.

Annually €11.25* /month €179.40 * €134.95* /year 24.78% discount In comparison to the regular monthly price

Monthly €14.95* /month Cancelable monthly

Compatible with:

5.3.0 - 5.7.19

Includes:

Free trial month

The subscription starts with a free trial month during which it can be canceled at any time.

All updates

During the subscription all released updates are included for free

Support from the Extension Partner

In case you have any questions or problems with your extension you can always ask the Extension Partner for help during the subscription.

Shopware 6 status:

There will be no successor for this extension

Description

Features

Nutzer brauchen Ihre Passwörter nach dem Umzug zu Shopware nicht mehr ändern
Passwörter werden nach erstem Kundenlogin mit dem Standard-Algorithmus (in der Regel bcrypt) neu-gehashed
leichte Übernahme von Passwort Oxid eSales

About the Extension

With the migration assistant, Shopware already offers the option of importing customer data from an existing OXID shop into Shopware. However, in this process no existing customer passwords are included. Thus, existing customers have to reset their password after the migration and reassign.
Background: OXID "encrypts" (in reality this is a hashing method) passwords using MD5 with a so-called "salt". Shopware supports the hashing with MD5, which is considered unsafe, but only without salt. This means that passwords cannot be transferred from OXID to Shopware.In order to solve this problem and to enable the password transfer from OXID to Shopware, GOLLE IT has developed its own password encoder for Shopware supporting OXID passwords. Thus, OXID passwords can also be imported into Shopware and users can log in with their usual password after a shop migration.During the first login the password is additionally re-hashed by Shopware using the standard algorithm (usually bcrypt). The passwords are therefore "migrated" in the end.
Do you need help with a shop migration or when transferring passwords? Feel free to contact our Shopware experts directly!
Scope of functions:

users will not have to change their passwords after moving to Shopware
new hashing of password (usually with bcrypt) after first user login
easy transfer of passwords from OXID eSales

Details

Available: English, German
Latest update: 11 March 2019
Publication date: 8 April 2019
Version: 1.0.0
Category: Migration tools

Resources

Reviews (0)

Leave a review!

If you downloaded this extension you can write a review in the Shopware Account.

Write a review

No reviews found.

About the Extension Partner

GOLLE IT

See all extensions

Partner Status

Shopware
Bronze Partner
Shopware
Extension Partner

Details

Ø-Rating: 4.8

Average rating of 4.8 out of 5 stars
Partner since: 2014
Extensions: 14

Support

Based in: Germany
Speaks: German, English
Response time: Very quickly

Please first install the plugin via the plugin manager in your Shopware installation. After installation, as recommended by the plugin, all caches need to be emptied. To use the OXID password encoder, please follow the instructions below:
1. Import customer data with OXID-SaltIn order to use the OXID password encoder, you must import the original passwords from the database table "oxuser" including the associated salt into Shopware. The import is best done directly via the Shopware Import / Export Wizard. Use the template "default_customers (customers)", which also contains the hashed password.
Tip: You can also import the passwords later. Thus, the customer data can be taken over the Shop Migrator and the passwords are imported second step.
The contents of the "OXPASSWORD" column from OXID must be copied to the "password" column of the Shopware import. The contents of the column "OXPASSSALT" must be in the column "fgits_oxid_password_salt", which was created by our plugin.
Finally, the "encoder" column must be set to "oxide" for all affected users. This activates the OXID password encoder for the imported customers.
You can then upload and import the edited CSV file again via the Shopware Import / Export Wizard.
2. Check the loginIn the best case, you have a test account of an OXID user. Please try to log in to Shopware using the access data from the old OXID shop. If the login works, the import was successful.
As soon as a user has logged in with his old login data, Shopware updates the password with the default encoder (mostly bcrypt). Bcrypt is significantly more secure than OXID's MD5 algorithm.
Important note: Please never select the OXID password encoder as the default encoder in the backend. The OXID encoder only supports the one-time conversion of the OXID login to Shopware and can not be used as an encoder for new registrations in Shopware!
If the login with your test access data does not work, please check in the database if the passwords and the salt were imported correctly and if the "encoder" column is set to "oxide".
If you need assistance with the installation and use of the plugin, please feel free to contact our support.