mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-07-04 09:42:29 +00:00
SEC-2658: Java Config triggers usePasswordAttrCompare to be set
This commit is contained in:
parent
bdde468e7d
commit
8eb89e3f12
@ -64,7 +64,7 @@ public class LdapAuthenticationProviderConfigurer<B extends ProviderManagerBuild
|
|||||||
private BaseLdapPathContextSource contextSource;
|
private BaseLdapPathContextSource contextSource;
|
||||||
private ContextSourceBuilder contextSourceBuilder = new ContextSourceBuilder();
|
private ContextSourceBuilder contextSourceBuilder = new ContextSourceBuilder();
|
||||||
private UserDetailsContextMapper userDetailsContextMapper;
|
private UserDetailsContextMapper userDetailsContextMapper;
|
||||||
private PasswordEncoder passwordEncoder;
|
private Object passwordEncoder;
|
||||||
private String passwordAttribute;
|
private String passwordAttribute;
|
||||||
private LdapAuthoritiesPopulator ldapAuthoritiesPopulator;
|
private LdapAuthoritiesPopulator ldapAuthoritiesPopulator;
|
||||||
|
|
||||||
@ -226,21 +226,7 @@ public class LdapAuthenticationProviderConfigurer<B extends ProviderManagerBuild
|
|||||||
*/
|
*/
|
||||||
public LdapAuthenticationProviderConfigurer<B> passwordEncoder(final org.springframework.security.crypto.password.PasswordEncoder passwordEncoder) {
|
public LdapAuthenticationProviderConfigurer<B> passwordEncoder(final org.springframework.security.crypto.password.PasswordEncoder passwordEncoder) {
|
||||||
Assert.notNull(passwordEncoder, "passwordEncoder must not be null.");
|
Assert.notNull(passwordEncoder, "passwordEncoder must not be null.");
|
||||||
passwordEncoder(new PasswordEncoder() {
|
this.passwordEncoder = passwordEncoder;
|
||||||
public String encodePassword(String rawPass, Object salt) {
|
|
||||||
checkSalt(salt);
|
|
||||||
return passwordEncoder.encode(rawPass);
|
|
||||||
}
|
|
||||||
|
|
||||||
public boolean isPasswordValid(String encPass, String rawPass, Object salt) {
|
|
||||||
checkSalt(salt);
|
|
||||||
return passwordEncoder.matches(rawPass, encPass);
|
|
||||||
}
|
|
||||||
|
|
||||||
private void checkSalt(Object salt) {
|
|
||||||
Assert.isNull(salt, "Salt value must be null when used with crypto module PasswordEncoder");
|
|
||||||
}
|
|
||||||
});
|
|
||||||
return this;
|
return this;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user