com.haulmont.cuba.core.sys

Class PasswordEncryptionImpl

java.lang.Object

com.haulmont.cuba.core.sys.PasswordEncryptionImpl

All Implemented Interfaces:

PasswordEncryption

@Component(value="cuba_PasswordEncryption")
public class PasswordEncryptionImpl
extends java.lang.Object
implements PasswordEncryption

Field Summary

Fields

Modifier and Type	Field and Description
protected EncryptionModule	encryptionModule
protected EncryptionModule	legacyEncryptionModule

Fields inherited from interface com.haulmont.cuba.core.global.PasswordEncryption

NAME

Constructor Summary

Constructors

Constructor and Description
PasswordEncryptionImpl()

Method Summary

Modifier and Type	Method and Description
boolean	checkPassword(User user, java.lang.String password) Check password for a user.
java.lang.String	generateRandomPassword()
protected EncryptionModule	getEncryptionModule(java.lang.String encryptionMethod)
HashDescriptor	getHash(java.lang.String content) Hashing string with salt.
java.lang.String	getHash(java.lang.String content, java.lang.String salt) Hashing string.
java.lang.String	getHashMethod()
java.lang.String	getPasswordHash(java.util.UUID userId, java.lang.String password) Hashing password to store it into DB.
java.lang.String	getPlainHash(java.lang.String content) Deprecated.
void	setEncryptionModule(EncryptionModule encryptionModule)
void	setLegacyEncryptionModule(EncryptionModule legacyEncryptionModule)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

encryptionModule

protected EncryptionModule encryptionModule

legacyEncryptionModule

protected EncryptionModule legacyEncryptionModule

Constructor Detail

PasswordEncryptionImpl

public PasswordEncryptionImpl()

Method Detail

setEncryptionModule

public void setEncryptionModule(EncryptionModule encryptionModule)

setLegacyEncryptionModule

public void setLegacyEncryptionModule(EncryptionModule legacyEncryptionModule)

generateRandomPassword

public java.lang.String generateRandomPassword()

Specified by:

generateRandomPassword in interface PasswordEncryption

Returns:

a random password with Base64 symbols

getHashMethod

public java.lang.String getHashMethod()

Specified by:

getHashMethod in interface PasswordEncryption

Returns:

a hashing method in use

getHash

public HashDescriptor getHash(java.lang.String content)

Description copied from interface: PasswordEncryption

Hashing string with salt.

Specified by:

getHash in interface PasswordEncryption

Parameters:

content - string for hashing

Returns:

hash with random salt. If the current HashMethod doesn't support salt, it is set to null.

getPasswordHash

public java.lang.String getPasswordHash(java.util.UUID userId,
                                        java.lang.String password)

Description copied from interface: PasswordEncryption

Hashing password to store it into DB.

Specified by:

getPasswordHash in interface PasswordEncryption

Parameters:

userId - user id

password - content for hashing

Returns:

hash with salt, if it is supported by the current HashMethod

getHash

public java.lang.String getHash(java.lang.String content,
                                java.lang.String salt)

Description copied from interface: PasswordEncryption

Hashing string.

Specified by:

getHash in interface PasswordEncryption

Parameters:

content - content for hashing

salt - salt

Returns:

hash with salt, if it is supported by the current HashMethod

getPlainHash

@Deprecated
public java.lang.String getPlainHash(java.lang.String content)

Deprecated.

Description copied from interface: PasswordEncryption

Hashing string without salt. This method must be used to encrypt password on a client tier before sending it to the middleware.

Specified by:

getPlainHash in interface PasswordEncryption

Parameters:

content - content for hashing

Returns:

hash

checkPassword

public boolean checkPassword(User user,
                             java.lang.String password)

Description copied from interface: PasswordEncryption

Check password for a user. This method is used on the middleware to compare password passed from a client with the one stored in the DB.

Specified by:

checkPassword in interface PasswordEncryption

Parameters:

user - user

password - password to check.

Returns:

true if the password is valid

getEncryptionModule

protected EncryptionModule getEncryptionModule(java.lang.String encryptionMethod)