Examples with DelegatingPasswordEncoder org.springframework.security.crypto.password.DelegatingPasswordEncoder used on opensource projects

Example 1 with DelegatingPasswordEncoder

use of org.springframework.security.crypto.password.DelegatingPasswordEncoder in project spring-security by spring-projects.

the class PasswordEncoderFactories method createDelegatingPasswordEncoder.

/**
 * Creates a {@link DelegatingPasswordEncoder} with default mappings. Additional
 * mappings may be added and the encoding will be updated to conform with best
 * practices. However, due to the nature of {@link DelegatingPasswordEncoder} the
 * updates should not impact users. The mappings current are:
 *
 * <ul>
 * <li>bcrypt - {@link BCryptPasswordEncoder} (Also used for encoding)</li>
 * <li>ldap -
 * {@link org.springframework.security.crypto.password.LdapShaPasswordEncoder}</li>
 * <li>MD4 -
 * {@link org.springframework.security.crypto.password.Md4PasswordEncoder}</li>
 * <li>MD5 - {@code new MessageDigestPasswordEncoder("MD5")}</li>
 * <li>noop -
 * {@link org.springframework.security.crypto.password.NoOpPasswordEncoder}</li>
 * <li>pbkdf2 - {@link Pbkdf2PasswordEncoder}</li>
 * <li>scrypt - {@link SCryptPasswordEncoder}</li>
 * <li>SHA-1 - {@code new MessageDigestPasswordEncoder("SHA-1")}</li>
 * <li>SHA-256 - {@code new MessageDigestPasswordEncoder("SHA-256")}</li>
 * <li>sha256 -
 * {@link org.springframework.security.crypto.password.StandardPasswordEncoder}</li>
 * <li>argon2 - {@link Argon2PasswordEncoder}</li>
 * </ul>
 * @return the {@link PasswordEncoder} to use
 */
@SuppressWarnings("deprecation")
public static PasswordEncoder createDelegatingPasswordEncoder() {
    String encodingId = "bcrypt";
    Map<String, PasswordEncoder> encoders = new HashMap<>();
    encoders.put(encodingId, new BCryptPasswordEncoder());
    encoders.put("ldap", new org.springframework.security.crypto.password.LdapShaPasswordEncoder());
    encoders.put("MD4", new org.springframework.security.crypto.password.Md4PasswordEncoder());
    encoders.put("MD5", new org.springframework.security.crypto.password.MessageDigestPasswordEncoder("MD5"));
    encoders.put("noop", org.springframework.security.crypto.password.NoOpPasswordEncoder.getInstance());
    encoders.put("pbkdf2", new Pbkdf2PasswordEncoder());
    encoders.put("scrypt", new SCryptPasswordEncoder());
    encoders.put("SHA-1", new org.springframework.security.crypto.password.MessageDigestPasswordEncoder("SHA-1"));
    encoders.put("SHA-256", new org.springframework.security.crypto.password.MessageDigestPasswordEncoder("SHA-256"));
    encoders.put("sha256", new org.springframework.security.crypto.password.StandardPasswordEncoder());
    encoders.put("argon2", new Argon2PasswordEncoder());
    return new DelegatingPasswordEncoder(encodingId, encoders);
}

Example 2 with DelegatingPasswordEncoder

use of org.springframework.security.crypto.password.DelegatingPasswordEncoder in project apollo by ctripcorp.

the class ApolloPasswordEncoderFactory method createDelegatingPasswordEncoder.

/**
 * Creates a {@link DelegatingPasswordEncoder} with default mappings {@link
 * PasswordEncoderFactories#createDelegatingPasswordEncoder()}, and add a placeholder encoder for
 * oidc {@link PlaceholderPasswordEncoder}
 *
 * @return the {@link PasswordEncoder} to use
 */
@SuppressWarnings("deprecation")
public static PasswordEncoder createDelegatingPasswordEncoder() {
    // copy from PasswordEncoderFactories, and it's should follow the upgrade of the PasswordEncoderFactories
    String encodingId = "bcrypt";
    Map<String, PasswordEncoder> encoders = new HashMap<>();
    encoders.put(encodingId, new BCryptPasswordEncoder());
    encoders.put("ldap", new org.springframework.security.crypto.password.LdapShaPasswordEncoder());
    encoders.put("MD4", new org.springframework.security.crypto.password.Md4PasswordEncoder());
    encoders.put("MD5", new org.springframework.security.crypto.password.MessageDigestPasswordEncoder("MD5"));
    encoders.put("noop", org.springframework.security.crypto.password.NoOpPasswordEncoder.getInstance());
    encoders.put("pbkdf2", new Pbkdf2PasswordEncoder());
    encoders.put("scrypt", new SCryptPasswordEncoder());
    encoders.put("SHA-1", new org.springframework.security.crypto.password.MessageDigestPasswordEncoder("SHA-1"));
    encoders.put("SHA-256", new org.springframework.security.crypto.password.MessageDigestPasswordEncoder("SHA-256"));
    encoders.put("sha256", new org.springframework.security.crypto.password.StandardPasswordEncoder());
    encoders.put("argon2", new Argon2PasswordEncoder());
    // placeholder encoder for oidc
    encoders.put(PlaceholderPasswordEncoder.ENCODING_ID, new PlaceholderPasswordEncoder());
    DelegatingPasswordEncoder delegatingPasswordEncoder = new DelegatingPasswordEncoder(encodingId, encoders);
    // todo: adapt the old password, and it should be removed in the next feature version of the 1.9.x
    delegatingPasswordEncoder.setDefaultPasswordEncoderForMatches(new PasswordEncoderAdapter(encoders.get(encodingId)));
    return delegatingPasswordEncoder;
}

Example 3 with DelegatingPasswordEncoder

use of org.springframework.security.crypto.password.DelegatingPasswordEncoder in project webanno by webanno.

the class WebAnno method passwordEncoder.

// The WebAnno User model class picks this bean up by name!
@Bean
public PasswordEncoder passwordEncoder() {
    // Set up a DelegatingPasswordEncoder which decodes legacy passwords using the
    // StandardPasswordEncoder but encodes passwords using the modern BCryptPasswordEncoder
    String encoderForEncoding = "bcrypt";
    Map<String, PasswordEncoder> encoders = new HashMap<>();
    encoders.put(encoderForEncoding, new BCryptPasswordEncoder());
    DelegatingPasswordEncoder delegatingEncoder = new DelegatingPasswordEncoder(encoderForEncoding, encoders);
    // Decode legacy passwords without encoder ID using the StandardPasswordEncoder
    delegatingEncoder.setDefaultPasswordEncoderForMatches(new StandardPasswordEncoder());
    return delegatingEncoder;
}

Example 4 with DelegatingPasswordEncoder

use of org.springframework.security.crypto.password.DelegatingPasswordEncoder in project collect by openforis.

the class PasswordStorageWebSecurityConfigurer method createPasswordEncoder.

@Bean
public PasswordEncoder createPasswordEncoder() {
    PasswordEncoder defaultEncoder = new OldPasswordEncoder();
    Map<String, PasswordEncoder> encoders = new HashMap<>();
    encoders.put(BCRYPT, new BCryptPasswordEncoder());
    encoders.put(SCRYPT, new SCryptPasswordEncoder());
    DelegatingPasswordEncoder passwordEncoder = new DelegatingPasswordEncoder(BCRYPT, encoders);
    passwordEncoder.setDefaultPasswordEncoderForMatches(defaultEncoder);
    return passwordEncoder;
}

Example 5 with DelegatingPasswordEncoder

use of org.springframework.security.crypto.password.DelegatingPasswordEncoder in project MaxKey by dromara.

the class ApplicationAutoConfiguration method passwordEncoder.

/**
 * Authentication Password Encoder .
 * @return
 */
@Bean(name = "passwordEncoder")
public PasswordEncoder passwordEncoder() {
    String idForEncode = "bcrypt";
    Map<String, PasswordEncoder> encoders = new HashMap<String, PasswordEncoder>();
    encoders.put(idForEncode, new BCryptPasswordEncoder());
    encoders.put("plain", NoOpPasswordEncoder.getInstance());
    encoders.put("pbkdf2", new Pbkdf2PasswordEncoder());
    encoders.put("scrypt", new SCryptPasswordEncoder());
    // md
    encoders.put("md4", new Md4PasswordEncoder());
    encoders.put("md5", new MessageDigestPasswordEncoder("MD5"));
    // sha
    encoders.put("sha1", new StandardPasswordEncoder("SHA-1", ""));
    encoders.put("sha256", new StandardPasswordEncoder());
    encoders.put("sha384", new StandardPasswordEncoder("SHA-384", ""));
    encoders.put("sha512", new StandardPasswordEncoder("SHA-512", ""));
    encoders.put("sm3", new SM3PasswordEncoder());
    encoders.put("ldap", new LdapShaPasswordEncoder());
    // idForEncode is default for encoder
    PasswordEncoder passwordEncoder = new DelegatingPasswordEncoder(idForEncode, encoders);
    if (_logger.isTraceEnabled()) {
        _logger.trace("Password Encoders :");
        for (String key : encoders.keySet()) {
            _logger.trace("{}= {}", String.format("%-10s", key), encoders.get(key).getClass().getName());
        }
    }
    _logger.debug("{} is default encoder", idForEncode);
    return passwordEncoder;
}