Change Notes item #497678, was opened at 2001-12-29 12:16
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=381174&aid=497678&group_id=22866

Category: JBossSX
Group: v2.4.4
Status: Open
Priority: 5
Submitted By: Scott M Stark (starksm)
Assigned to: Scott M Stark (starksm)
Summary: UsernamePassword module hashing added

Initial Comment:
The base UsernamePasswordLoginModule now supports
digest hashing of the input clear text password for
comparsion in validatePassword(inputPassword, 
expectedPassword). The new options are:

hashAlgorithm: The name of the MessageDigest algorithm
to use to hash the password. This must be specified
to enable hashing.
hashEncoding: The string format for the hashed pass. It
must be one of base64 or hex. Base64 is the default.
hashCharset: The encoding used to convert the clear
text password to a byte array. The platform default
encoding is the default.

When hashAlgorithm is specified, the clear text
password obtained from the CallbackHandler is hashed
before it is passed to validatePassword as the
inputPassword argument. The expectedPassword as 
obtained via getUsersPassword() must be comparably
hashed.



----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=381174&aid=497678&group_id=22866

_______________________________________________
Jboss-development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to