[ 
https://issues.apache.org/jira/browse/SHIRO-290?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13713841#comment-13713841
 ] 

Les Hazlewood commented on SHIRO-290:
-------------------------------------

Thanks for the blog link!  That was helpful.

I think an even better approach might be to use Shiro's out of the box 
PasswordMatcher which delegates to a PasswordService 
(http://shiro.apache.org/static/1.2.2/apidocs/org/apache/shiro/authc/credential/PasswordService.html).
  Then you can have a PasswordService implementation that delegates to jBcrypt.

The benefit of this approach is that you can use the PasswordService for both 
the PasswordMatcher's needs as well as your application's needs when 
setting/resetting a password.
                
> Create a BCrypt Hash implementation
> -----------------------------------
>
>                 Key: SHIRO-290
>                 URL: https://issues.apache.org/jira/browse/SHIRO-290
>             Project: Shiro
>          Issue Type: New Feature
>          Components: Cryptography & Hashing
>            Reporter: Les Hazlewood
>            Assignee: Les Hazlewood
>             Fix For: 1.3.0
>
>
> Enable BCrypt hashing for those that wish to use it.  The following code can 
> probably be modified and included (it is a BSD license):
> http://www.mindrot.org/projects/jBCrypt/

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to