Examples of PasswordEncoder

org.acegisecurity.providers.encoding.PasswordEncoder

Interface for performing authentication operations on a password.
@author colin sampaleanu @version $Id: PasswordEncoder.java 1784 2007-02-24 21:00:24Z luke_t $
org.apache.archiva.redback.policy.PasswordEncoder
org.codehaus.plexus.security.policy.PasswordEncoder

org.jasypt.spring.security3.PasswordEncoder

This class implements the Spring Security 3.x org.springframework.security.authentication.encoding.PasswordEncoder interface, allowing Spring Security-enabled applications to use JASYPT for password encryption.

Objects of this class will internally hold either an object of type org.jasypt.util.password.PasswordEncryptor or an object of type org.jasypt.digest.StringDigester (only one of them), which should be set by respectively calling {@link #setPasswordEncryptor(PasswordEncryptor)} or{@link #setStringDigester(StringDigester)}after creation. If neither a PasswordEncryptor nor a StringDigester are set, a new org.jasypt.util.password.BasicPasswordEncryptor object is created and internally used.

Important: This implementation ignores any salt provided through the interface methods, as the internal Jasypt PasswordEncryptor or StringDigester objects normally use a random one. This means that salt can be safely passed as null.

Usage with a PasswordEncryptor

This class can be used like this from your Spring XML resource files:

 ... <!-- Your application may use the PasswordEncryptor in several places, -->  <!-- like for example at new user sign-up.                             -->  <bean id="jasyptPasswordEncryptor" class="org.jasypt.util.password.StrongPasswordEncryptor" /> ... ... <!-- This Spring Security-friendly PasswordEncoder implementation will --> <!-- wrap the PasswordEncryptor instance so that it can be used from   --> <!-- the security framework.                                           --> <bean id="passwordEncoder" class="org.jasypt.spring.security2.PasswordEncoder"> <property name="passwordEncryptor"> <ref bean="jasyptPasswordEncryptor" /> </property> </bean> ... ... <!-- Your DaoAuthenticationProvider will then use it like with any     --> <!-- other implementation of the PasswordEncoder interface.            --> <bean id="daoAuthenticationProvider" class="org.springframework.security.providers.dao.DaoAuthenticationProvider"> <property name="userDetailsService" ref="userDetailsService"/> <property name="passwordEncoder"> <ref bean="passwordEncoder" /> </property> </bean> ...

Usage with a StringDigester

This class can be used like this from your Spring XML resource files:

 ... <!-- Your application may use the StringDigester in several places,    -->  <!-- like for example at new user sign-up.                             -->  <bean id="jasyptStringDigester" class="org.jasypt.digest.StandardStringDigester" > <property name="algorithm" value="SHA-1" /> <property name="iterations" value="100000" /> </bean> ... ... <!-- This Spring Security-friendly PasswordEncoder implementation will --> <!-- wrap the StringDigester instance so that it can be used from      --> <!-- the security framework.                                           --> <bean id="passwordEncoder" class="org.jasypt.spring.security2.PasswordEncoder"> <property name="stringDigester"> <ref bean="jasyptStringDigester" /> </property> </bean> ... ... <!-- Your DaoAuthenticationProvider will then use it like with any     --> <!-- other implementation of the PasswordEncoder interface.            --> <bean id="daoAuthenticationProvider" class="org.springframework.security.providers.dao.DaoAuthenticationProvider"> <property name="userDetailsService" ref="userDetailsService"/> <property name="passwordEncoder"> <ref bean="passwordEncoder" /> </property> </bean> ...

This class is thread-safe

@since 1.6 @author Daniel Fernández

org.springframework.security.authentication.encoding.PasswordEncoder
Interface for performing authentication operations on a password. @author colin sampaleanu @deprecated It is recommended to use{@link org.springframework.security.crypto.password.PasswordEncoder}instead which better accommodates best practice of randomly generated salt that is included with the password.
org.springframework.security.crypto.password.PasswordEncoder
Service interface for encoding passwords. The preferred implementation is {@code BCryptPasswordEncoder}. @author Keith Donald
org.springframework.security.providers.encoding.PasswordEncoder

Examples of org.acegisecurity.providers.encoding.PasswordEncoder

        
        if (doEncrypt) {
            DaoAuthenticationProvider provider =
                    (DaoAuthenticationProvider) ctx.getBean("daoAuthenticationProvider");
            String algorithm = WebloggerConfig.getProperty("passwds.encryption.algorithm");
            PasswordEncoder encoder = null;
            if (algorithm.equalsIgnoreCase("SHA")) {
                encoder = new ShaPasswordEncoder();
            } else if (algorithm.equalsIgnoreCase("MD5")) {
                encoder = new Md5PasswordEncoder();
            } else {

View Full Code Here

Examples of org.acegisecurity.providers.encoding.PasswordEncoder

        
        if (doEncrypt) {
            DaoAuthenticationProvider provider =
                    (DaoAuthenticationProvider) ctx.getBean("daoAuthenticationProvider");
            String algorithm = RollerConfig.getProperty("passwds.encryption.algorithm");
            PasswordEncoder encoder = null;
            if (algorithm.equalsIgnoreCase("SHA")) {
                encoder = new ShaPasswordEncoder();
            } else if (algorithm.equalsIgnoreCase("MD5")) {
                encoder = new Md5PasswordEncoder();
            } else {

View Full Code Here

Examples of org.acegisecurity.providers.encoding.PasswordEncoder

        ((SeteUserProfileServiceImpl)sups).setUserDao(mockUserDao);
        
        SeteUserDao mockSeteUserDao = createMock(SeteUserDao.class);
        ((SeteUserProfileServiceImpl)sups).setSeteUserDao(mockSeteUserDao);
        
        PasswordEncoder mockPasswordEncoder = createMock(PasswordEncoder.class);
        ((SeteUserProfileServiceImpl)sups).setPasswordEncoder(mockPasswordEncoder);
        
        expect(mockUserDao.findById(Integer.valueOf(csupvo.getUserId()))).andReturn(aSeteUser);
        expect(mockPasswordEncoder.encodePassword(csupvo.getOldPassword(), null)).andReturn("sete");
        expect(mockPasswordEncoder.encodePassword(csupvo.getNewPassword(), null)).andReturn("newSete");
        
        replay(mockUserDao);
        replay(mockPasswordEncoder);
        
        sups.changeSeteUserPassword(csupvo);

View Full Code Here

Examples of org.acegisecurity.providers.encoding.PasswordEncoder

        ((SeteUserProfileServiceImpl)sups).setUserDao(mockUserDao);
        
        SeteUserDao mockSeteUserDao = createMock(SeteUserDao.class);
        ((SeteUserProfileServiceImpl)sups).setSeteUserDao(mockSeteUserDao);
        
        PasswordEncoder mockPasswordEncoder = createMock(PasswordEncoder.class);
        ((SeteUserProfileServiceImpl)sups).setPasswordEncoder(mockPasswordEncoder);
        
        expect(mockUserDao.findById(Integer.valueOf(csupvo.getUserId()))).andReturn(aSeteUser);
        expect(mockPasswordEncoder.encodePassword(csupvo.getOldPassword(), null)).andReturn("sete");
        expect(mockPasswordEncoder.encodePassword(csupvo.getNewPassword(), null)).andReturn("newSete");
        
        replay(mockUserDao);
        replay(mockPasswordEncoder);
        
        try{

View Full Code Here

Examples of org.acegisecurity.providers.encoding.PasswordEncoder

        
        if (doEncrypt) {
            DaoAuthenticationProvider provider =
                    (DaoAuthenticationProvider) ctx.getBean("daoAuthenticationProvider");
            String algorithm = RollerConfig.getProperty("passwds.encryption.algorithm");
            PasswordEncoder encoder = null;
            if (algorithm.equalsIgnoreCase("SHA")) {
                encoder = new ShaPasswordEncoder();
            } else if (algorithm.equalsIgnoreCase("MD5")) {
                encoder = new Md5PasswordEncoder();
            } else {

View Full Code Here

Examples of org.acegisecurity.providers.encoding.PasswordEncoder

        
        if (doEncrypt) {
            DaoAuthenticationProvider provider =
                    (DaoAuthenticationProvider) ctx.getBean("daoAuthenticationProvider");
            String algorithm = RollerConfig.getProperty("passwds.encryption.algorithm");
            PasswordEncoder encoder = null;
            if (algorithm.equalsIgnoreCase("SHA")) {
                encoder = new ShaPasswordEncoder();
            } else if (algorithm.equalsIgnoreCase("MD5")) {
                encoder = new Md5PasswordEncoder();
            } else {

View Full Code Here

Examples of org.apache.archiva.redback.policy.PasswordEncoder

                    authnResultErrors.add(
                        new AuthenticationFailureCause( AuthenticationConstants.AUTHN_MUST_CHANGE_PASSWORD_EXCEPTION,
                                                        e.getMessage() ) );
                }


                PasswordEncoder encoder = securityPolicy.getPasswordEncoder();
                log.debug( "PasswordEncoder: {}", encoder.getClass().getName() );


                boolean isPasswordValid = encoder.isPasswordValid( user.getEncodedPassword(), source.getPassword() );
                if ( isPasswordValid )
                {
                    log.debug( "User {} provided a valid password", source.getUsername() );


                    try

View Full Code Here

Examples of org.apache.archiva.redback.policy.PasswordEncoder

                    authnResultErrors.add(
                        new AuthenticationFailureCause( AuthenticationConstants.AUTHN_MUST_CHANGE_PASSWORD_EXCEPTION,
                                                        e.getMessage() ) );
                }


                PasswordEncoder encoder = securityPolicy.getPasswordEncoder();
                log.debug( "PasswordEncoder: {}", encoder.getClass().getName() );


                boolean isPasswordValid = encoder.isPasswordValid( user.getEncodedPassword(), source.getPassword() );
                if ( isPasswordValid )
                {
                    log.debug( "User {} provided a valid password", source.getUsername() );


                    try

View Full Code Here

Examples of org.codehaus.plexus.security.policy.PasswordEncoder

            if ( user.isLocked() && !user.isPasswordChangeRequired() )
            {
                throw new AccountLockedException( "Account " + source.getPrincipal() + " is locked.", user );
            }
            
            PasswordEncoder encoder = securityPolicy.getPasswordEncoder();
            getLogger().debug( "PasswordEncoder: " + encoder.getClass().getName() );
            
            boolean isPasswordValid = encoder.isPasswordValid( user.getEncodedPassword(), source.getPassword() );
            if ( isPasswordValid )
            {
                getLogger().debug( "User " + source.getPrincipal() + " provided a valid password" );
                
                try

View Full Code Here

Examples of org.jasypt.spring.security3.PasswordEncoder

        setReversible(false);
    }


    @Override
    protected PasswordEncoder createStringEncoder() {
        PasswordEncoder encoder = new PasswordEncoder();
        encoder.setPasswordEncryptor(new StrongPasswordEncryptor());
        return encoder;
    }

View Full Code Here

0 1 2 3 4

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.