de.hybris.platform.persistence.security

Class GenericSaltedPasswordEncoder

java.lang.Object

de.hybris.platform.persistence.security.GenericSaltedPasswordEncoder

All Implemented Interfaces:

PasswordEncoder, Serializable

public class GenericSaltedPasswordEncoder
extends Object
implements PasswordEncoder

Generic password encoder that can be parametrized with SaltEncodingPolicy and digest algorithm name. Algorithm name must be supported by MessageDigest

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
GenericSaltedPasswordEncoder()

Method Summary

Modifier and Type	Method and Description
boolean	check(String uid, String encoded, String password) Calculates the hash of 'plain' and compare it with the value of 'encoded'.
String	decode(String encoded) Decode the given encoded password.
String	encode(String uid, String password) This method add salt to the password and then calculates digest
String	getAlgorithm()
void	setAlgorithm(String algorithm) Sets MessageDigest algorithm used by this bean
void	setSaltEncodingPolicy(SaltEncodingPolicy saltEncodingPolicy)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

GenericSaltedPasswordEncoder

public GenericSaltedPasswordEncoder()

Method Detail

encode

public String encode(String uid,
                     String password)

This method add salt to the password and then calculates digest

Specified by:

encode in interface PasswordEncoder

Parameters:

uid - the user id

password - the user password

Returns:

the hashed value of the salted password

See Also:

SaltedMD5PasswordEncoder, PlainTextPasswordEncoder

check

public boolean check(String uid,
                     String encoded,
                     String password)

Calculates the hash of 'plain' and compare it with the value of 'encoded'.

Specified by:

check in interface PasswordEncoder

Parameters:

uid - the user id

encoded - could be 'null'

password - could be 'null'

Returns:

true if hash of 'plain' is equals to 'encoded'

See Also:

MD5PasswordEncoder

decode

public final String decode(String encoded)
                    throws EJBCannotDecodePasswordException

Description copied from interface: PasswordEncoder

Decode the given encoded password. Throws exception if this is not possible.

Specified by:

decode in interface PasswordEncoder

Parameters:

encoded - the encoded password

Returns:

the decoded password

Throws:

EJBCannotDecodePasswordException - if the password cannot be decoded. (MD5 passwords cannot be decoded)

See Also:

MD5PasswordEncoder

getAlgorithm

public String getAlgorithm()

setAlgorithm

public void setAlgorithm(String algorithm)

Sets MessageDigest algorithm used by this bean

Parameters:

algorithm - message digest algorithm

setSaltEncodingPolicy

public void setSaltEncodingPolicy(SaltEncodingPolicy saltEncodingPolicy)