com.atlassian.crowd.password.encoder

Class LdapSshaPasswordEncoder

java.lang.Object

org.springframework.security.authentication.encoding.LdapShaPasswordEncoder

com.atlassian.crowd.password.encoder.LdapSshaPasswordEncoder

All Implemented Interfaces:

InternalPasswordEncoder, LdapPasswordEncoder, org.springframework.security.authentication.encoding.PasswordEncoder

public class LdapSshaPasswordEncoder
extends org.springframework.security.authentication.encoding.LdapShaPasswordEncoder
implements LdapPasswordEncoder, InternalPasswordEncoder

This class overrides the LdapShaPasswordEncoder to specifically add salt to the SSHA if it has not been provided

Constructor Summary

Constructors

Constructor and Description
LdapSshaPasswordEncoder()

Method Summary

Modifier and Type	Method and Description
String	encodePassword(String rawPass, Object salt) This method delegates to LdapShaPasswordEncoder.encodePassword(java.lang.String, java.lang.Object), but if the passed in salt is null Crowd will use the propertyManager to find the salt used for Token's and pass that along to the underlying implementation
String	getKey() The key to define this password encoder
boolean	isPasswordValid(String encPass, String rawPass, Object salt) Validates a specified "raw" password against an encoded password.

Methods inherited from class org.springframework.security.authentication.encoding.LdapShaPasswordEncoder

setForceLowerCasePrefix

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

LdapSshaPasswordEncoder

public LdapSshaPasswordEncoder()

Method Detail

encodePassword

public String encodePassword(String rawPass,
                             Object salt)

This method delegates to LdapShaPasswordEncoder.encodePassword(java.lang.String, java.lang.Object), but if the passed in salt is null Crowd will use the propertyManager to find the salt used for Token's and pass that along to the underlying implementation

Specified by:

encodePassword in interface org.springframework.security.authentication.encoding.PasswordEncoder

Overrides:

encodePassword in class org.springframework.security.authentication.encoding.LdapShaPasswordEncoder

Parameters:

rawPass - the password to encode

salt - the salt needs to be of type byte[], if null a random salt value will be used

Returns:

String the encoded password

isPasswordValid

public boolean isPasswordValid(String encPass,
                               String rawPass,
                               Object salt)

Description copied from interface: PasswordEncoder

Validates a specified "raw" password against an encoded password.

The encoded password should have previously been generated by PasswordEncoder.encodePassword(String, Object). This method will encode the rawPass (using the optional salt), and then compared it with the presented encPass.

For a discussion of salts, please refer to PasswordEncoder.encodePassword(String, Object).

Specified by:

isPasswordValid in interface org.springframework.security.authentication.encoding.PasswordEncoder

Overrides:

isPasswordValid in class org.springframework.security.authentication.encoding.LdapShaPasswordEncoder

Parameters:

encPass - a pre-encoded password

rawPass - a raw password to encode and compare against the pre-encoded password

salt - optionally used by the implementation to "salt" the raw password before encoding. A null value is legal.

Returns:

true if the password is valid , false otherwise

getKey

public String getKey()

Description copied from interface: PasswordEncoder

The key to define this password encoder

Returns: