Package org.appng.core.security
Security related types.
-
Interface Summary Interface Description PasswordHandler Provides methods to handle passwords.SaltedDigest Provides methods required to create a salted hash of a given secret. -
Class Summary Class Description BCryptPasswordHandler Provides methods to hash and validate passwords usings the bcrypt algorithm.ConfigurablePasswordPolicy A configurablePasswordPolicy
using aPasswordValidator
.
A multiline platform property namedconfigurablePasswordPolicy
can be used for configuration, defaults as shown:DigestUtil Utility class to generate a digest of the form<user>|<yyyyMMddHHmmss>|<utc-offset>|<hash>
.
Example:
admin|20160114120555|+01:00|1D87C8A5E738BD3015AC57F2D9B862A5
The<hash>
is a MD5 hash of<user>|<timestamp>|<utc-offset>|<shared-secret>
, where<shared-secret>
comes from the platform property "sharedSecret".DigestValidator Utility class to validate a digest.SaltedDigestSha1 Provides methods required to create a salted hash of a given secret using the SHA-1 algorithm.