org.appng.core.security

Class Sha1PasswordHandler

java.lang.Object

org.appng.core.security.Sha1PasswordHandler

All Implemented Interfaces:

PasswordHandler

public class Sha1PasswordHandler
extends Object
implements PasswordHandler

Provides methods to hash and validate passwords using the SHA-1 algorithm.

Author:

Matthias Herlitzius

Constructor Summary

Constructors

Constructor and Description
Sha1PasswordHandler(AuthSubject authSubject)

Method Summary

Modifier and Type	Method and Description
String	getPasswordResetDigest() Returns a digest which can be used for the "Forgot password?" function.
boolean	isValidPassword(String password) Checks whether the password is valid.
boolean	isValidPasswordResetDigest(String digest) Checks whether the digest is valid.
void	migrate(CoreService service, String password) Migrates passwords of the current PasswordHandler instance to passwords handled by CoreService.getDefaultPasswordHandler(org.appng.api.model.AuthSubject).
void	savePassword(String password) Hashes and persists the password.
void	updateSubject(CoreService service) Updates the SubjectImpl instance in the database.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Sha1PasswordHandler

public Sha1PasswordHandler(AuthSubject authSubject)

Method Detail

savePassword

public void savePassword(String password)

Description copied from interface: PasswordHandler

Hashes and persists the password.

Specified by:

savePassword in interface PasswordHandler

Parameters:

password - The cleartext password.

isValidPassword

public boolean isValidPassword(String password)

Description copied from interface: PasswordHandler

Checks whether the password is valid.

Specified by:

isValidPassword in interface PasswordHandler

Parameters:

password - The cleartext password.

Returns:

True if the password is valid, false if it is invalid.

getPasswordResetDigest

public String getPasswordResetDigest()

Description copied from interface: PasswordHandler

Returns a digest which can be used for the "Forgot password?" function.

Specified by:

getPasswordResetDigest in interface PasswordHandler

Returns:

A digest.

isValidPasswordResetDigest

public boolean isValidPasswordResetDigest(String digest)

Description copied from interface: PasswordHandler

Checks whether the digest is valid.

Specified by:

isValidPasswordResetDigest in interface PasswordHandler

Parameters:

digest - The digest.

Returns:

True if the digest is valid, false if it is invalid.

updateSubject

public void updateSubject(CoreService service)
                   throws BusinessException

Description copied from interface: PasswordHandler

Updates the SubjectImpl instance in the database. Must be called if modifications have been made to the instance of AuthSubject / SubjectImpl by methods of this interface and the instance is not updated later during the same transaction.

Specified by:

updateSubject in interface PasswordHandler

Parameters:

service - The CoreService instance.

Throws:

BusinessException - Throws a BusinessException if the SubjectImpl can not be updated.

migrate

@Transactional
public void migrate(CoreService service,
                                   String password)

Description copied from interface: PasswordHandler

Migrates passwords of the current PasswordHandler instance to passwords handled by CoreService.getDefaultPasswordHandler(org.appng.api.model.AuthSubject).

Specified by:

migrate in interface PasswordHandler

Parameters:

service - Instance of CoreService

password - The current password.