org.camunda.bpm.engine.impl.digest
Class PasswordManager

java.lang.Object
  org.camunda.bpm.engine.impl.digest.PasswordManager

public class PasswordManager
extends Object

Different Camunda versions use different hashing algorithms. In addition, it is possible to add a custom hashing algorithm. The PasswordManager ensures that the right algorithm is used for the encryption. Default algorithms: Version: | Algorithm <= Camunda 7.6 | SHA1 >= Camunda 7.7 | SHA512

Field Summary

protected PasswordEncryptor	defaultPasswordEncryptor
static SecurityLogger	LOG
protected Map<String,PasswordEncryptor>	passwordChecker
protected DatabasePrefixHandler	prefixHandler

Constructor Summary

PasswordManager(PasswordEncryptor defaultPasswordEncryptor, List<PasswordEncryptor> customPasswordChecker)

Method Summary

protected void	addAllPasswordChecker(List<PasswordEncryptor> list)
protected void	addDefaultEncryptor(PasswordEncryptor defaultPasswordEncryptor)
protected void	addPasswordCheckerAndThrowErrorIfAlreadyAvailable(PasswordEncryptor encryptor)
boolean	check(String password, String encrypted)
String	encrypt(String password)
protected PasswordEncryptor	getCorrectEncryptorForPassword(String encryptedPassword)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

public static final SecurityLogger LOG

passwordChecker

protected Map<String,PasswordEncryptor> passwordChecker

defaultPasswordEncryptor

protected PasswordEncryptor defaultPasswordEncryptor

prefixHandler

protected DatabasePrefixHandler prefixHandler

Constructor Detail

PasswordManager

public PasswordManager(PasswordEncryptor defaultPasswordEncryptor,
                       List<PasswordEncryptor> customPasswordChecker)

Method Detail

addAllPasswordChecker

protected void addAllPasswordChecker(List<PasswordEncryptor> list)

addPasswordCheckerAndThrowErrorIfAlreadyAvailable

protected void addPasswordCheckerAndThrowErrorIfAlreadyAvailable(PasswordEncryptor encryptor)

addDefaultEncryptor

protected void addDefaultEncryptor(PasswordEncryptor defaultPasswordEncryptor)

encrypt

public String encrypt(String password)

check

public boolean check(String password,
                     String encrypted)

getCorrectEncryptorForPassword

protected PasswordEncryptor getCorrectEncryptorForPassword(String encryptedPassword)