org.jasig.portlet.courses.dao.xml

Class SecureRequestCredentials

java.lang.Object

org.jasig.portlet.courses.dao.xml.SecureRequestCredentials

All Implemented Interfaces:

Serializable

public final class SecureRequestCredentials
extends Object
implements Serializable

Holds a username and password in a secure manner. The intent is not to protect from in memory attacks as calling getPassword() returns the plain-text password. The intent is to prevent accidental exposure via serialization, toString or other similar approach.
Decryption will also only work within the same JVM as the object was created as the password used is random and scoped to the life of this class.

Author:

Eric Dalquist

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
SecureRequestCredentials(String username, char[] password)

Method Summary

Methods

Modifier and Type	Method and Description
boolean	equals(Object obj)
char[]	getPassword()
String	getUsername()
int	hashCode()
String	toString()

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Detail

SecureRequestCredentials

public SecureRequestCredentials(String username,
                        char[] password)

Parameters:

username - Username to store

password - Password to store, the array will be filled with empty strings before this constructor returns

Method Detail

getUsername

public String getUsername()

Returns:

The username

getPassword

public char[] getPassword()

Returns:

The password, will fail if attempting this on an object deserialized from another server.

hashCode

public int hashCode()

Overrides:

hashCode in class Object

equals

public boolean equals(Object obj)

Overrides:

equals in class Object

toString

public String toString()

Overrides:

toString in class Object