de.innovationgate.wgpublisher

Class HashedPasswordService

java.lang.Object

de.innovationgate.wgpublisher.HashedPasswordService

All Implemented Interfaces:

de.innovationgate.wga.modules.RegistryAwareModule

public class HashedPasswordService
extends java.lang.Object
implements de.innovationgate.wga.modules.RegistryAwareModule

Tool object use hashed password values as stored by . These values contain a hashed password plus a hashing scheme identifier. Use this service to create, read and check those values against cleartext passwords. On creating hashed passwords this object automatically uses the hashing algorithm that is configured as default for the current OpenWGA runtime. It however can read and check all hashes whose hashing scheme is known to the runtime.

Constructor Summary

Constructors

Constructor and Description
HashedPasswordService()

Method Summary

Methods

Modifier and Type	Method and Description
boolean	checkEqual(de.innovationgate.utils.security.HashedPassword hashedPassword, java.lang.String cleartextPassword) Checks if a hashed password and a cleartext password are equal
de.innovationgate.utils.security.HashedPassword	create(java.lang.String cleartextPassword, java.lang.Object salt) Creates a new hashed password from a cleartext password and a salt value
java.lang.Object	generateSalt() Generates a salt value to be used with create(String, Object) on hashed password creation
void	injectRegistry(de.innovationgate.wga.modules.ModuleRegistry registry)
de.innovationgate.utils.security.HashedPassword	read(java.lang.String hashedPassword) Reads a stored hashed password

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HashedPasswordService

public HashedPasswordService()

Method Detail

injectRegistry

public void injectRegistry(de.innovationgate.wga.modules.ModuleRegistry registry)

Specified by:

injectRegistry in interface de.innovationgate.wga.modules.RegistryAwareModule

create

public de.innovationgate.utils.security.HashedPassword create(java.lang.String cleartextPassword,
                                                     java.lang.Object salt)
                                                       throws de.innovationgate.utils.security.HashingException,
                                                              de.innovationgate.webgate.api.WGException

Creates a new hashed password from a cleartext password and a salt value

Parameters:

cleartextPassword - The cleartext password

salt - The salt, generated by generateSalt()

Returns:

The hashed password. Use HashedPassword.toString() for the storable string representation.

Throws:

de.innovationgate.utils.security.HashingException

de.innovationgate.webgate.api.WGException

read

public de.innovationgate.utils.security.HashedPassword read(java.lang.String hashedPassword)

Reads a stored hashed password

Parameters:

hashedPassword - The stored hashed password string

Returns:

The hashed password. Use checkEqual(HashedPassword, String) to check it against a cleartext password for equality

generateSalt

public java.lang.Object generateSalt()
                              throws de.innovationgate.utils.security.HashingException,
                                     de.innovationgate.webgate.api.WGException

Generates a salt value to be used with create(String, Object) on hashed password creation

Throws:

de.innovationgate.utils.security.HashingException

de.innovationgate.webgate.api.WGException

checkEqual

public boolean checkEqual(de.innovationgate.utils.security.HashedPassword hashedPassword,
                 java.lang.String cleartextPassword)
                   throws de.innovationgate.utils.security.HashingException

Checks if a hashed password and a cleartext password are equal

Parameters:

hashedPassword - The hashed password, read via read(String) or created via create(String, Object)

cleartextPassword - The cleartext password to check

Returns:

true if the hashed password originates from the cleartext password

Throws:

de.innovationgate.utils.security.HashingException