spring security中配置密码为md5的带salt加密

spring security中配置密码为md5的带salt加密

service:

 

private Md5PasswordEncoder encoder; //spring security md5

public Md5PasswordEncoder getEncoder() {

return encoder;

}

@Resource

public void setEncoder(Md5PasswordEncoder encoder) {

this.encoder = encoder;

}

 

@Override

public void addUser(User user) {

//把加密后的密码，赋值给user password

//盐为 user name

user.setPassword(encoder.encodePassword(user.getPassword(), user.getName()));

userDAO.addUser(user);

}

jt.executeUpdate(new StringSql(
     "insert into VDB_USERS (USERID,PASSWORD) values (?,?)",
     uid, new Md5PasswordEncoder().encodePassword(up, uid)));

//new Md5PasswordEncoder().encodePassword(up, uid)

此处的Md5PasswordEncoder为spring自带的md5加密类，其中第一个参数up为密码，uid为盐值

 

applicationContext-security.xml:

 

<!-- 配置认证管理器 实现用户认证的入口，主要实现UserDetailsService接口即可 -->

<authentication-manager alias="authenticationManager">

<!-- 

<authentication-provider ref="principalProvider"></authentication-provider>

-->

<!-- 使用自定义userDetailService -->

<authentication-provider user-service-ref="userService">

 

<!-- 使用MD5对密码进行加密 -->

<password-encoder hash="md5">

<!-- 盐，根据用户name作为盐 -->

<salt-source user-property="name"/>

</password-encoder>

 

<!-- 

<security:user-service>

<security:user name="admin"

password="2l232f297a57a5a748394a0e4a80lfc3"

authorities="ROLE_USER" />

<security:user name="user" password="user"

authorities="ROLE_USER" />

</security:user-service>

-->

<!-- 默认test.user表。。。 -->

<!--