Package rs.baselib.crypto

Class CombinedPasswordHasher

java.lang.Object

rs.baselib.crypto.CombinedPasswordHasher

All Implemented Interfaces:

PasswordHasher

public class CombinedPasswordHasher
extends Object
implements PasswordHasher

Implements a combined strategy to hash passwords.

The object will use a default ExtendedPasswordHasher in order to create hashes but will use all defined hashers to test a given password hash.

Since:

1.2.9

Author:

ralph

See Also:

• ExtendedPasswordHasher

Field Summary

Fields

Modifier and Type	Field	Description
static final PasswordHasher	UNIX_STRATEGY_BLOWFISH	A UNIX strategy to hash and check passwords (with BlowfishPasswordHasher as default).
static final PasswordHasher	UNIX_STRATEGY_MD5	A UNIX strategy to hash and check passwords (with Md5PasswordHasher as default).
static final PasswordHasher	UNIX_STRATEGY_PHP	A UNIX strategy to hash and check passwords (with PhpPasswordHasher as default).
static final PasswordHasher	UNIX_STRATEGY_SHA256	A UNIX strategy to hash and check passwords (with Md5PasswordHasher as default).
static final PasswordHasher	UNIX_STRATEGY_SHA512	A UNIX strategy to hash and check passwords (with Md5PasswordHasher as default).

Constructor Summary

Constructors

Constructor	Description
CombinedPasswordHasher(ExtendedPasswordHasher... passwordHashers)	Constructor.

Method Summary

Modifier and Type	Method	Description
ExtendedPasswordHasher	getDefaultPasswordHasher()	Returns the default password hasher, that is the hasher used for hashing passwords.
String	getPasswordHash(String plainPassword)	Returns a hash of the given plain password.
ExtendedPasswordHasher[]	getPasswordHashers()	Returns the password hashers used.
boolean	testPassword(String plainPassword, String passwordHash)	Tests a plain Password whether it is the same as a previously hashed password.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

UNIX_STRATEGY_MD5

public static final PasswordHasher UNIX_STRATEGY_MD5

A UNIX strategy to hash and check passwords (with Md5PasswordHasher as default).

This instance used (in order of check):

• Md5PasswordHasher
• BlowfishPasswordHasher
• PhpPasswordHasher
• Sha512PasswordHasher
• Sha256PasswordHasher
• DummyPasswordHasher

UNIX_STRATEGY_BLOWFISH

public static final PasswordHasher UNIX_STRATEGY_BLOWFISH

A UNIX strategy to hash and check passwords (with BlowfishPasswordHasher as default).

This instance used (in order of check):

• BlowfishPasswordHasher
• Md5PasswordHasher
• PhpPasswordHasher
• Sha512PasswordHasher
• Sha256PasswordHasher
• DummyPasswordHasher

UNIX_STRATEGY_PHP

public static final PasswordHasher UNIX_STRATEGY_PHP

A UNIX strategy to hash and check passwords (with PhpPasswordHasher as default).

This instance used (in order of check):

• PhpPasswordHasher
• Md5PasswordHasher
• BlowfishPasswordHasher
• Sha512PasswordHasher
• Sha256PasswordHasher
• DummyPasswordHasher

UNIX_STRATEGY_SHA512

public static final PasswordHasher UNIX_STRATEGY_SHA512

A UNIX strategy to hash and check passwords (with Md5PasswordHasher as default).

This instance used (in order of check):

• Sha512PasswordHasher
• Md5PasswordHasher
• BlowfishPasswordHasher
• PhpPasswordHasher
• Sha256PasswordHasher
• DummyPasswordHasher

UNIX_STRATEGY_SHA256

public static final PasswordHasher UNIX_STRATEGY_SHA256

A UNIX strategy to hash and check passwords (with Md5PasswordHasher as default).

This instance used (in order of check):

• Sha256PasswordHasher
• Md5PasswordHasher
• BlowfishPasswordHasher
• PhpPasswordHasher
• Sha512PasswordHasher
• DummyPasswordHasher

Constructor Details

CombinedPasswordHasher

public CombinedPasswordHasher(ExtendedPasswordHasher... passwordHashers)

Constructor.

Parameters:

passwordHashers - the list of hash algorithms to be used. the first algorithm will be used for hashing a password (default hasher).

Method Details

getPasswordHash

public String getPasswordHash(String plainPassword)

Returns a hash of the given plain password.

Specified by:

getPasswordHash in interface PasswordHasher

Parameters:

plainPassword - the password to be hashed

Returns:

the hash of the password

testPassword

public boolean testPassword(String plainPassword,
 String passwordHash)

Tests a plain Password whether it is the same as a previously hashed password.

Specified by:

testPassword in interface PasswordHasher

Parameters:

plainPassword - the plain password to be checked

passwordHash - the hash of another password

Returns:

true when both passwords match each other

getPasswordHashers

public ExtendedPasswordHasher[] getPasswordHashers()

Returns the password hashers used.

Returns:

the password hashers

getDefaultPasswordHasher

public ExtendedPasswordHasher getDefaultPasswordHasher()

Returns the default password hasher, that is the hasher used for hashing passwords.

Returns:

the default password hasher