restx.security

Class EqualsCredentialsStrategy

java.lang.Object

restx.security.EqualsCredentialsStrategy

All Implemented Interfaces:

CredentialsStrategy

public class EqualsCredentialsStrategy
extends Object
implements CredentialsStrategy

A very basic credentials strategy with no encryption at all. Note that this mean that credentials are probably stored without salt and with very basic client side hashing which is not a good practice. But in some situations where app has very limited access it may be ok.

Constructor Summary

Constructors

Constructor and Description
EqualsCredentialsStrategy()

Method Summary

Methods

Modifier and Type	Method and Description
boolean	checkCredentials(String userName, String providedPasswordHash, String storedCredentials)
String	cryptCredentialsForStorage(String userName, String providedPasswordHash)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EqualsCredentialsStrategy

public EqualsCredentialsStrategy()

Method Detail

checkCredentials

public boolean checkCredentials(String userName,
                       String providedPasswordHash,
                       String storedCredentials)

Specified by:

checkCredentials in interface CredentialsStrategy

cryptCredentialsForStorage

public String cryptCredentialsForStorage(String userName,
                                String providedPasswordHash)

Specified by:

cryptCredentialsForStorage in interface CredentialsStrategy