Package org.springframework.security.crypto.password

Class AbstractPasswordEncoder

java.lang.Object

org.springframework.security.crypto.password.AbstractValidatingPasswordEncoder

org.springframework.security.crypto.password.AbstractPasswordEncoder

All Implemented Interfaces:

PasswordEncoder

public abstract class AbstractPasswordEncoder
extends AbstractValidatingPasswordEncoder

Abstract base class for password encoders

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	AbstractPasswordEncoder()

Method Summary

Modifier and Type	Method	Description
protected byte[]	encodeAndConcatenate(CharSequence rawPassword, byte[] salt)
protected abstract byte[]	encodedNonNullPassword(CharSequence rawPassword, byte[] salt)
protected String	encodeNonNullPassword(String rawPassword)
protected static boolean	matchesNonNull(byte[] expected, byte[] actual)	Constant time comparison to prevent against timing attacks.
protected boolean	matchesNonNull(String rawPassword, String encodedPassword)

Methods inherited from class org.springframework.security.crypto.password.AbstractValidatingPasswordEncoder

encode, matches, upgradeEncoding, upgradeEncodingNonNull

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AbstractPasswordEncoder

protected AbstractPasswordEncoder()

Method Details

encodeNonNullPassword

protected String encodeNonNullPassword(String rawPassword)

Specified by:

encodeNonNullPassword in class AbstractValidatingPasswordEncoder

matchesNonNull

protected boolean matchesNonNull(String rawPassword,
 String encodedPassword)

Specified by:

matchesNonNull in class AbstractValidatingPasswordEncoder

encodedNonNullPassword

protected abstract byte[] encodedNonNullPassword(CharSequence rawPassword,
 byte[] salt)

encodeAndConcatenate

protected byte[] encodeAndConcatenate(CharSequence rawPassword,
 byte[] salt)

matchesNonNull

protected static boolean matchesNonNull(byte[] expected,
 byte[] actual)

Constant time comparison to prevent against timing attacks.