spring security中配置密码为md5的带salt加密
spring security中配置密码为md5的带salt加密
service:
private Md5PasswordEncoder encoder; //spring security md5
public Md5PasswordEncoder getEncoder() {
return encoder;
}
@Resource
public void setEncoder(Md5PasswordEncoder encoder) {
this.encoder = encoder;
}
@Override
public void addUser(User user) {
//把加密后的密码，赋值给user password
//盐为 user name
user.setPassword(encoder.encodePassword(user.getPassword(), user.getName()));
userDAO.addUser(user);
}
jt.executeUpdate(new StringSql(
"insert
into VDB_USERS (USERID,PASSWORD) values (?,?)",
uid,
new Md5PasswordEncoder().encodePassword(up, uid)));
//new Md5PasswordEncoder().encodePassword(up, uid)
此处的Md5PasswordEncoder为spring自带的md5加密类，其中第一个参数up为密码，uid为盐值
applicationContext-security.xml:
<!-- 配置认证管理器 实现用户认证的入口，主要实现UserDetailsService接口即可 -->
<authentication-manager alias="authenticationManager">
<!--
<authentication-provider ref="principalProvider"></authentication-provider>
-->
<!-- 使用自定义userDetailService -->
<authentication-provider user-service-ref="userService">
<!-- 使用MD5对密码进行加密 -->
<password-encoder hash="md5">
<!-- 盐，根据用户name作为盐 -->
<salt-source user-property="name"/>
</password-encoder>
<!--
<security:user-service>
<security:user name="admin"
password="2l232f297a57a5a748394a0e4a80lfc3"
authorities="ROLE_USER" />
<security:user name="user" password="user"
authorities="ROLE_USER" />
</security:user-service>
-->
<!-- 默认test.user表。。。 -->
<!--
