org.exoplatform.web.security.hash

Class NoSaltedHashService

java.lang.Object

org.exoplatform.web.security.hash.NoSaltedHashService

All Implemented Interfaces:

SaltedHashService

public class NoSaltedHashService
extends Object
implements SaltedHashService

A SaltedHashService implementation which does not do any hashing at all. It simply returns the plaintext password from #getSaltedHash(String, SecureRandom) and tests the string equality of password and saltedHash in validate(String, String). This class is intended to be used in tests and maybe also in some real life scenarios where backwards compatibility requires storing of plaintext passwords.

Author:

Peter Palaga

Constructor Summary

Constructors

Constructor and Description
NoSaltedHashService()

Method Summary

Methods

Modifier and Type	Method and Description
String	getSaltedHash(String password) Computes a salted hash of given plaintext password suitable for storing in a database.
boolean	validate(String password, String saltedHash) Checks whether given plaintext password corresponds to the given saltedHash.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

NoSaltedHashService

public NoSaltedHashService()

Method Detail

getSaltedHash

public String getSaltedHash(String password)
                     throws SaltedHashException

Description copied from interface: SaltedHashService

Computes a salted hash of given plaintext password suitable for storing in a database.

Specified by:

getSaltedHash in interface SaltedHashService

Throws:

SaltedHashException

validate

public boolean validate(String password,
               String saltedHash)
                 throws SaltedHashException

Description copied from interface: SaltedHashService

Checks whether given plaintext password corresponds to the given saltedHash.

Specified by:

validate in interface SaltedHashService

Returns:

true if the given password matches the given saltedHash; false otherwise.

Throws:

SaltedHashException - if the saltedHash cannot be parsed or if the hashing algorithm is not available.