SEC-1212: Added info on password encoding to the namespace appendix

This commit is contained in:
Luke Taylor 2009-08-22 13:09:23 +00:00
parent 579644fa95
commit c59f786919
2 changed files with 11 additions and 2 deletions

View File

@ -421,7 +421,7 @@
<interfacename>AuthenticationProvider</interfacename> instances should be children of this
element.</para>
<section>
<title>The &lt;authentication-provider&gt; Element</title>
<title>The <literal>&lt;authentication-provider&gt;</literal> Element</title>
<para> This element is basically a shorthand syntax for configuring a <link
xlink:href="#core-services-dao-provider"><classname>DaoAuthenticationProvider</classname></link>.
<classname>DaoAuthenticationProvider</classname> loads user information from a
@ -432,6 +432,15 @@
<literal>user-service-ref</literal> attribute to point to a bean defined elsewhere in
the application context). You can find examples of these variations in the <link
xlink:href="#ns-auth-providers">namespace introduction</link>. </para>
<section>
<title>The <literal>&lt;password-encoder&gt;</literal> Element</title>
<para>Authentication providers can optionally be configured to use a password encoder as
described in the <link xlink:href="#ns-password-encoder">namespace introduction</link>.
This will result in the bean being injected with the appropriate <interfacename>PasswordEncoder</interfacename>
instance, potentially with an accompanying <interfacename>SaltSource</interfacename> bean to
provide salt values for hashing.
</para>
</section>
</section>
<section>
<title>Using <literal>&lt;authentication-provider&gt;</literal> to refer to an

View File

@ -303,7 +303,7 @@
<interfacename>AuthenticationProvider</interfacename>. See <xref linkend="ns-auth-manager"
/> for more on information on how the Spring Security
<interfacename>AuthenticationManager</interfacename> is configured using the namespace. </para>
<section>
<section xml:id="ns-password-encoder">
<title>Adding a Password Encoder</title>
<para> Often your password data will be encoded using a hashing algorithm. This is supported
by the <literal>&lt;password-encoder&gt;</literal> element. With SHA encoded passwords,