Examples of PasswordEncoder

org.acegisecurity.providers.encoding.PasswordEncoder

Interface for performing authentication operations on a password.
@author colin sampaleanu @version $Id: PasswordEncoder.java 1784 2007-02-24 21:00:24Z luke_t $
org.apache.archiva.redback.policy.PasswordEncoder
org.codehaus.plexus.security.policy.PasswordEncoder

org.jasypt.spring.security3.PasswordEncoder

This class implements the Spring Security 3.x org.springframework.security.authentication.encoding.PasswordEncoder interface, allowing Spring Security-enabled applications to use JASYPT for password encryption.

Objects of this class will internally hold either an object of type org.jasypt.util.password.PasswordEncryptor or an object of type org.jasypt.digest.StringDigester (only one of them), which should be set by respectively calling {@link #setPasswordEncryptor(PasswordEncryptor)} or{@link #setStringDigester(StringDigester)}after creation. If neither a PasswordEncryptor nor a StringDigester are set, a new org.jasypt.util.password.BasicPasswordEncryptor object is created and internally used.

Important: This implementation ignores any salt provided through the interface methods, as the internal Jasypt PasswordEncryptor or StringDigester objects normally use a random one. This means that salt can be safely passed as null.

Usage with a PasswordEncryptor

This class can be used like this from your Spring XML resource files:

 ... <!-- Your application may use the PasswordEncryptor in several places, -->  <!-- like for example at new user sign-up.                             -->  <bean id="jasyptPasswordEncryptor" class="org.jasypt.util.password.StrongPasswordEncryptor" /> ... ... <!-- This Spring Security-friendly PasswordEncoder implementation will --> <!-- wrap the PasswordEncryptor instance so that it can be used from   --> <!-- the security framework.                                           --> <bean id="passwordEncoder" class="org.jasypt.spring.security2.PasswordEncoder"> <property name="passwordEncryptor"> <ref bean="jasyptPasswordEncryptor" /> </property> </bean> ... ... <!-- Your DaoAuthenticationProvider will then use it like with any     --> <!-- other implementation of the PasswordEncoder interface.            --> <bean id="daoAuthenticationProvider" class="org.springframework.security.providers.dao.DaoAuthenticationProvider"> <property name="userDetailsService" ref="userDetailsService"/> <property name="passwordEncoder"> <ref bean="passwordEncoder" /> </property> </bean> ...

Usage with a StringDigester

This class can be used like this from your Spring XML resource files:

 ... <!-- Your application may use the StringDigester in several places,    -->  <!-- like for example at new user sign-up.                             -->  <bean id="jasyptStringDigester" class="org.jasypt.digest.StandardStringDigester" > <property name="algorithm" value="SHA-1" /> <property name="iterations" value="100000" /> </bean> ... ... <!-- This Spring Security-friendly PasswordEncoder implementation will --> <!-- wrap the StringDigester instance so that it can be used from      --> <!-- the security framework.                                           --> <bean id="passwordEncoder" class="org.jasypt.spring.security2.PasswordEncoder"> <property name="stringDigester"> <ref bean="jasyptStringDigester" /> </property> </bean> ... ... <!-- Your DaoAuthenticationProvider will then use it like with any     --> <!-- other implementation of the PasswordEncoder interface.            --> <bean id="daoAuthenticationProvider" class="org.springframework.security.providers.dao.DaoAuthenticationProvider"> <property name="userDetailsService" ref="userDetailsService"/> <property name="passwordEncoder"> <ref bean="passwordEncoder" /> </property> </bean> ...

This class is thread-safe

@since 1.6 @author Daniel Fernández

org.springframework.security.authentication.encoding.PasswordEncoder
Interface for performing authentication operations on a password. @author colin sampaleanu @deprecated It is recommended to use{@link org.springframework.security.crypto.password.PasswordEncoder}instead which better accommodates best practice of randomly generated salt that is included with the password.
org.springframework.security.crypto.password.PasswordEncoder
Service interface for encoding passwords. The preferred implementation is {@code BCryptPasswordEncoder}. @author Keith Donald
org.springframework.security.providers.encoding.PasswordEncoder

Examples of org.springframework.security.authentication.encoding.PasswordEncoder

            return;
        }


        if (passwordEncoderToSet instanceof org.springframework.security.crypto.password.PasswordEncoder) {
            final org.springframework.security.crypto.password.PasswordEncoder delegate = (org.springframework.security.crypto.password.PasswordEncoder) passwordEncoderToSet;
            passwordEncoder = new PasswordEncoder() {
                @Override
                public String encodePassword(final String rawPass, final Object salt) {
                    checkSalt(salt);
                    return delegate.encode(rawPass);
                }

View Full Code Here

Examples of org.springframework.security.authentication.encoding.PasswordEncoder

        /*String[] beans = ctx.getBeanDefinitionNames();
        for (String bean : beans) {
            log.debug(bean);
        }*/


        PasswordEncoder passwordEncoder = null;
        try {
            ProviderManager provider = (ProviderManager) ctx.getBean("org.springframework.security.authenticationManager");
            for (Object o : provider.getProviders()) {
                AuthenticationProvider p = (AuthenticationProvider) o;
                if (p instanceof RememberMeAuthenticationProvider) {
                    config.put("rememberMeEnabled", Boolean.FALSE);
                } else if (ctx.getBean("passwordEncoder") != null) {
                    passwordEncoder = (PasswordEncoder) ctx.getBean("passwordEncoder");
                }
            }
        } catch (NoSuchBeanDefinitionException n) {
            log.debug("authenticationManager bean not found, assuming test and ignoring...");
            // ignore, should only happen when testing
        }


        context.setAttribute(Constants.CONFIG, config);


        // output the retrieved values for the Init and Context Parameters
        if (log.isDebugEnabled()) {
            log.debug("Remember Me Enabled? " + config.get("rememberMeEnabled"));
            if (passwordEncoder != null) {
                log.debug("Password Encoder: " + passwordEncoder.getClass().getSimpleName());
            }
            log.debug("Populating drop-downs...");
        }


        setupContext(context);

View Full Code Here

Examples of org.springframework.security.authentication.encoding.PasswordEncoder

  CustomUserDetailsService customUserDetailsService;




  public String getMD5EncodedPasswordHash(String pass) {
    try {
      PasswordEncoder encoder = new Md5PasswordEncoder();
      String hashedPass = encoder.encodePassword(pass, null);
      return hashedPass.toLowerCase();
    }
    catch (Exception e) {


    }

View Full Code Here

Examples of org.springframework.security.authentication.encoding.PasswordEncoder




  @Override
  public String encodePassword(String rawPass, Object salt) {
    try {
      PasswordEncoder encoder = new Md5PasswordEncoder();
      String hashedPass = encoder.encodePassword(rawPass, null);
      return hashedPass.toLowerCase();
    }
    catch (Exception e) {


    }

View Full Code Here

Examples of org.springframework.security.authentication.encoding.PasswordEncoder

    }


    
    @Override
    protected PasswordEncoder createStringEncoder() {
        return new PasswordEncoder() {
            
            @Override
            public boolean isPasswordValid(String encPass, String rawPass, Object salt)
                    throws DataAccessException {
               return false;

View Full Code Here

Examples of org.springframework.security.authentication.encoding.PasswordEncoder

        }


        if (passwordEncoder instanceof org.springframework.security.crypto.password.PasswordEncoder) {
            final org.springframework.security.crypto.password.PasswordEncoder delegate =
                    (org.springframework.security.crypto.password.PasswordEncoder)passwordEncoder;
            this.passwordEncoder = new PasswordEncoder() {
                public String encodePassword(String rawPass, Object salt) {
                    checkSalt(salt);
                    return delegate.encode(rawPass);
                }

View Full Code Here

Examples of org.springframework.security.crypto.password.PasswordEncoder

    }


    // SEC-2056
    public void testUserNotFoundEncodesPassword() {
        UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("missing", "koala");
        PasswordEncoder encoder = mock(PasswordEncoder.class);
        when(encoder.encode(anyString())).thenReturn("koala");
        DaoAuthenticationProvider provider = new DaoAuthenticationProvider();
        provider.setHideUserNotFoundExceptions(false);
        provider.setPasswordEncoder(encoder);
        provider.setUserDetailsService(new MockAuthenticationDaoUserrod());
        try {

View Full Code Here

Examples of org.springframework.security.crypto.password.PasswordEncoder

        verify(encoder).matches(isA(String.class),  isA(String.class));
    }


    public void testUserNotFoundBCryptPasswordEncoder() {
        UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("missing", "koala");
        PasswordEncoder encoder =  new BCryptPasswordEncoder();
        DaoAuthenticationProvider provider = new DaoAuthenticationProvider();
        provider.setHideUserNotFoundExceptions(false);
        provider.setPasswordEncoder(encoder);
        MockAuthenticationDaoUserrod userDetailsService = new MockAuthenticationDaoUserrod();
        userDetailsService.password = encoder.encode((CharSequence) token.getCredentials());
        provider.setUserDetailsService(userDetailsService);
        try {
            provider.authenticate(token);
            fail("Expected Exception");
        } catch(UsernameNotFoundException success) {}

View Full Code Here

Examples of org.springframework.security.crypto.password.PasswordEncoder

     * deterministic and {@link #testUserNotFoundEncodesPassword()} ensures that SEC-2056 is fixed.
     */
    public void IGNOREtestSec2056() {
        UsernamePasswordAuthenticationToken foundUser = new UsernamePasswordAuthenticationToken("rod", "koala");
        UsernamePasswordAuthenticationToken notFoundUser = new UsernamePasswordAuthenticationToken("notFound", "koala");
        PasswordEncoder encoder = new BCryptPasswordEncoder(10,new SecureRandom());
        DaoAuthenticationProvider provider = new DaoAuthenticationProvider();
        provider.setHideUserNotFoundExceptions(false);
        provider.setPasswordEncoder(encoder);
        MockAuthenticationDaoUserrod userDetailsService = new MockAuthenticationDaoUserrod();
        userDetailsService.password = encoder.encode((CharSequence) foundUser.getCredentials());
        provider.setUserDetailsService(userDetailsService);


        int sampleSize = 100;


        List<Long> userFoundTimes = new ArrayList<Long>(sampleSize);

View Full Code Here

Examples of org.springframework.security.crypto.password.PasswordEncoder

        return sum / counts.size();
    }


    public void testUserNotFoundNullCredentials() {
        UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("missing", null);
        PasswordEncoder encoder = mock(PasswordEncoder.class);
        DaoAuthenticationProvider provider = new DaoAuthenticationProvider();
        provider.setHideUserNotFoundExceptions(false);
        provider.setPasswordEncoder(encoder);
        provider.setUserDetailsService(new MockAuthenticationDaoUserrod());
        try {

View Full Code Here

0 1 2 3 4

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.