Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-05-30 16:52:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update reference for PasswordEncoders

Browse Source 
Issue gh-10506
This commit is contained in:
Joe Grandja 2022-10-12 07:22:58 -04:00
parent c50441b59f
commit ffbcaca24a
2 changed files with 20 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
docs/modules/ROOT/pages/features/authentication/password-storage.adoc
View File

@ -93,8 +93,12 @@ String idForEncode = "bcrypt";
Map encoders = new HashMap<>(); Map encoders = new HashMap<>();
encoders.put(idForEncode, new BCryptPasswordEncoder()); encoders.put(idForEncode, new BCryptPasswordEncoder());
encoders.put("noop", NoOpPasswordEncoder.getInstance()); encoders.put("noop", NoOpPasswordEncoder.getInstance());
encoders.put("pbkdf2", new Pbkdf2PasswordEncoder()); encoders.put("pbkdf2", Pbkdf2PasswordEncoder.defaultsForSpringSecurity_v5_5());
encoders.put("scrypt", new SCryptPasswordEncoder()); encoders.put("pbkdf2@SpringSecurity_v5_8", Pbkdf2PasswordEncoder.defaultsForSpringSecurity_v5_8());
encoders.put("scrypt", SCryptPasswordEncoder.defaultsForSpringSecurity_v4_1());
encoders.put("scrypt@SpringSecurity_v5_8", SCryptPasswordEncoder.defaultsForSpringSecurity_v5_8());
encoders.put("argon2", Argon2PasswordEncoder.defaultsForSpringSecurity_v5_2());
encoders.put("argon2@SpringSecurity_v5_8", Argon2PasswordEncoder.defaultsForSpringSecurity_v5_8());
encoders.put("sha256", new StandardPasswordEncoder()); encoders.put("sha256", new StandardPasswordEncoder());
PasswordEncoder passwordEncoder = PasswordEncoder passwordEncoder =
@ -108,8 +112,12 @@ val idForEncode = "bcrypt"
val encoders: MutableMap<String, PasswordEncoder> = mutableMapOf() val encoders: MutableMap<String, PasswordEncoder> = mutableMapOf()
encoders[idForEncode] = BCryptPasswordEncoder() encoders[idForEncode] = BCryptPasswordEncoder()
encoders["noop"] = NoOpPasswordEncoder.getInstance() encoders["noop"] = NoOpPasswordEncoder.getInstance()
encoders["pbkdf2"] = Pbkdf2PasswordEncoder() encoders["pbkdf2"] = Pbkdf2PasswordEncoder.defaultsForSpringSecurity_v5_5()
encoders["scrypt"] = SCryptPasswordEncoder() encoders["pbkdf2@SpringSecurity_v5_8"] = Pbkdf2PasswordEncoder.defaultsForSpringSecurity_v5_8()
encoders["scrypt"] = SCryptPasswordEncoder.defaultsForSpringSecurity_v4_1()
encoders["scrypt@SpringSecurity_v5_8"] = SCryptPasswordEncoder.defaultsForSpringSecurity_v5_8()
encoders["argon2"] = Argon2PasswordEncoder.defaultsForSpringSecurity_v5_2()
encoders["argon2@SpringSecurity_v5_8"] = Argon2PasswordEncoder.defaultsForSpringSecurity_v5_8()
encoders["sha256"] = StandardPasswordEncoder() encoders["sha256"] = StandardPasswordEncoder()
val passwordEncoder: PasswordEncoder = DelegatingPasswordEncoder(idForEncode, encoders) val passwordEncoder: PasswordEncoder = DelegatingPasswordEncoder(idForEncode, encoders)
@ -363,7 +371,7 @@ The current implementation of the `Argon2PasswordEncoder` requires BouncyCastle.
[source,java,role="primary"] [source,java,role="primary"]
---- ----
// Create an encoder with all the defaults // Create an encoder with all the defaults
Argon2PasswordEncoder encoder = new Argon2PasswordEncoder(); Argon2PasswordEncoder encoder = Argon2PasswordEncoder.defaultsForSpringSecurity_v5_8();
String result = encoder.encode("myPassword"); String result = encoder.encode("myPassword");
assertTrue(encoder.matches("myPassword", result)); assertTrue(encoder.matches("myPassword", result));
---- ----
@ -372,7 +380,7 @@ assertTrue(encoder.matches("myPassword", result));
[source,kotlin,role="secondary"] [source,kotlin,role="secondary"]
---- ----
// Create an encoder with all the defaults // Create an encoder with all the defaults
val encoder = Argon2PasswordEncoder() val encoder = Argon2PasswordEncoder.defaultsForSpringSecurity_v5_8()
val result: String = encoder.encode("myPassword") val result: String = encoder.encode("myPassword")
assertTrue(encoder.matches("myPassword", result)) assertTrue(encoder.matches("myPassword", result))
---- ----
@ -392,7 +400,7 @@ This algorithm is a good choice when FIPS certification is required.
[source,java,role="primary"] [source,java,role="primary"]
---- ----
// Create an encoder with all the defaults // Create an encoder with all the defaults
Pbkdf2PasswordEncoder encoder = new Pbkdf2PasswordEncoder(); Pbkdf2PasswordEncoder encoder = Pbkdf2PasswordEncoder.defaultsForSpringSecurity_v5_8();
String result = encoder.encode("myPassword"); String result = encoder.encode("myPassword");
assertTrue(encoder.matches("myPassword", result)); assertTrue(encoder.matches("myPassword", result));
---- ----
@ -401,7 +409,7 @@ assertTrue(encoder.matches("myPassword", result));
[source,kotlin,role="secondary"] [source,kotlin,role="secondary"]
---- ----
// Create an encoder with all the defaults // Create an encoder with all the defaults
val encoder = Pbkdf2PasswordEncoder() val encoder = Pbkdf2PasswordEncoder.defaultsForSpringSecurity_v5_8()
val result: String = encoder.encode("myPassword") val result: String = encoder.encode("myPassword")
assertTrue(encoder.matches("myPassword", result)) assertTrue(encoder.matches("myPassword", result))
---- ----
@ -420,7 +428,7 @@ Like other adaptive one-way functions, it should be tuned to take about 1 second
[source,java,role="primary"] [source,java,role="primary"]
---- ----
// Create an encoder with all the defaults // Create an encoder with all the defaults
SCryptPasswordEncoder encoder = new SCryptPasswordEncoder(); SCryptPasswordEncoder encoder = SCryptPasswordEncoder.defaultsForSpringSecurity_v5_8();
String result = encoder.encode("myPassword"); String result = encoder.encode("myPassword");
assertTrue(encoder.matches("myPassword", result)); assertTrue(encoder.matches("myPassword", result));
---- ----
@ -429,7 +437,7 @@ assertTrue(encoder.matches("myPassword", result));
[source,kotlin,role="secondary"] [source,kotlin,role="secondary"]
---- ----
// Create an encoder with all the defaults // Create an encoder with all the defaults
val encoder = SCryptPasswordEncoder() val encoder = SCryptPasswordEncoder.defaultsForSpringSecurity_v5_8()
val result: String = encoder.encode("myPassword") val result: String = encoder.encode("myPassword")
assertTrue(encoder.matches("myPassword", result)) assertTrue(encoder.matches("myPassword", result))
---- ----

4
docs/modules/ROOT/pages/features/integrations/cryptography.adoc
View File

@ -251,7 +251,7 @@ In order to defeat password cracking PBKDF2 is a deliberately slow algorithm and
[source,java,role="primary"] [source,java,role="primary"]
---- ----
// Create an encoder with all the defaults // Create an encoder with all the defaults
Pbkdf2PasswordEncoder encoder = new Pbkdf2PasswordEncoder(); Pbkdf2PasswordEncoder encoder = Pbkdf2PasswordEncoder.defaultsForSpringSecurity_v5_8();
String result = encoder.encode("myPassword"); String result = encoder.encode("myPassword");
assertTrue(encoder.matches("myPassword", result)); assertTrue(encoder.matches("myPassword", result));
---- ----
@ -260,7 +260,7 @@ assertTrue(encoder.matches("myPassword", result));
[source,kotlin,role="secondary"] [source,kotlin,role="secondary"]
---- ----
// Create an encoder with all the defaults // Create an encoder with all the defaults
val encoder = Pbkdf2PasswordEncoder() val encoder = Pbkdf2PasswordEncoder.defaultsForSpringSecurity_v5_8()
val result: String = encoder.encode("myPassword") val result: String = encoder.encode("myPassword")
assertTrue(encoder.matches("myPassword", result)) assertTrue(encoder.matches("myPassword", result))
---- ----