Re: [cas-dev] CAS4 PasswordEncoder

2009-08-14 Thread Scott Battaglia
On Fri, Aug 14, 2009 at 10:31 AM, Luke Taylor wrote: > > > On 14/08/2009 14:28, Scott Battaglia wrote: > >> Thanks, do you know if in Spring Security 3, they've restructured the >> code enough so that we wouldn't be pulling a huge amount of code to get >> this. I don't really want CAS4's core dep

Re: [cas-dev] CAS4 PasswordEncoder

2009-08-14 Thread Luke Taylor
On 14/08/2009 14:28, Scott Battaglia wrote: Thanks, do you know if in Spring Security 3, they've restructured the code enough so that we wouldn't be pulling a huge amount of code to get this. I don't really want CAS4's core depending on all of Spring Security ;-) "They"...?? Don't you mean

Re: [cas-dev] CAS4 PasswordEncoder

2009-08-14 Thread Scott Battaglia
Have you guys used this? I took a look and I don't see an exact match for the interface, but I looked quickly (though I'm also open to better interfaces). Essentially I need something that can take the unecrypted password, the hashed password, and the salt and tell me if they're the same. Cheers

Re: [cas-dev] CAS4 PasswordEncoder

2009-08-14 Thread Scott Battaglia
Thanks, do you know if in Spring Security 3, they've restructured the code enough so that we wouldn't be pulling a huge amount of code to get this. I don't really want CAS4's core depending on all of Spring Security ;-) Cheers, Scott On Fri, Aug 14, 2009 at 5:55 AM, Cyrille Le Clerc < cyri...@c

Re: [cas-dev] CAS4 PasswordEncoder

2009-08-14 Thread Cyrille Le Clerc
Hello Scott, Could Spring Security's PasswordEncoder#encodePassword(rawPass, salt) api fits your needs ? It provides LdapShaPasswordEncoder, Md4PasswordEncoder, Md5PasswordEncoder, MessageDigestPasswordEncoder, PlaintextPasswordEncoder and ShaPasswordEncoder implementations. We happily u

Re: [cas-dev] CAS4 PasswordEncoder

2009-08-13 Thread Marvin Addison
> it seems like this type of interface and underlying > support should already be handled somewhere.  Anyone know of a library that > does this that's in the Public Maven2 Repository? I believe Jasypt, http://www.jasypt.org/, has convenient interfaces and beans for message digests. M -- You are