[Security] tweaked some exception messages

symfony · Apr 12, 2011 · e6fd8de · e6fd8de · lsmith77 · Apr 12, 2011
1 parent 41a1a75
commit e6fd8de
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/Symfony/Component/Security/Core/Authentication/Provider/DaoAuthenticationProvider.php b/src/Symfony/Component/Security/Core/Authentication/Provider/DaoAuthenticationProvider.php
@@ -59,11 +59,11 @@ protected function checkAuthentication(UserInterface $user, UsernamePasswordToke
             }
         } else {
             if (!$presentedPassword = $token->getCredentials()) {
-                throw new BadCredentialsException('Bad credentials');
+                throw new BadCredentialsException('The presented password cannot be empty.');
             }
 
             if (!$this->encoderFactory->getEncoder($user)->isPasswordValid($user->getPassword(), $presentedPassword, $user->getSalt())) {
-                throw new BadCredentialsException('Bad credentials');
+                throw new BadCredentialsException('The presented password is invalid.');
             }
         }
     }