DelegatingPasswordEncoder which supports
password upgrades. There are no plans to remove this support. It is deprecated to indicate
that this is a legacy implementation and using it is considered insecure.@Deprecated public class LdapShaPasswordEncoder extends java.lang.Object implements PasswordEncoder
PasswordEncoder is provided for legacy purposes only and is not considered
secure.
A version of PasswordEncoder which supports Ldap SHA and SSHA (salted-SHA)
encodings. The values are base-64 encoded and have the label "{SHA}" (or "{SSHA}")
prepended to the encoded hash. These can be made lower-case in the encoded password, if
required, by setting the forceLowerCasePrefix property to true.
Also supports plain text passwords, so can safely be used in cases when both encoded
and non-encoded passwords are in use or when a null implementation is required.| Constructor and Description |
|---|
LdapShaPasswordEncoder()
Deprecated.
|
LdapShaPasswordEncoder(BytesKeyGenerator saltGenerator)
Deprecated.
|
| Modifier and Type | Method and Description |
|---|---|
java.lang.String |
encode(java.lang.CharSequence rawPass)
Deprecated.
Calculates the hash of password (and salt bytes, if supplied) and returns a base64
encoded concatenation of the hash and salt, prefixed with {SHA} (or {SSHA} if salt
was used).
|
boolean |
matches(java.lang.CharSequence rawPassword,
java.lang.String encodedPassword)
Deprecated.
Checks the validity of an unencoded password against an encoded one in the form
"{SSHA}sQuQF8vj8Eg2Y1hPdh3bkQhCKQBgjhQI".
|
void |
setForceLowerCasePrefix(boolean forceLowerCasePrefix)
Deprecated.
|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitupgradeEncodingpublic LdapShaPasswordEncoder()
public LdapShaPasswordEncoder(BytesKeyGenerator saltGenerator)
public java.lang.String encode(java.lang.CharSequence rawPass)
encode in interface PasswordEncoderrawPass - the password to be encoded.public boolean matches(java.lang.CharSequence rawPassword,
java.lang.String encodedPassword)
matches in interface PasswordEncoderrawPassword - unencoded password to be verified.encodedPassword - the actual SSHA or SHA encoded passwordpublic void setForceLowerCasePrefix(boolean forceLowerCasePrefix)