View Javadoc

1   /* Copyright 2004 Acegi Technology Pty Limited
2    *
3    * Licensed under the Apache License, Version 2.0 (the "License");
4    * you may not use this file except in compliance with the License.
5    * You may obtain a copy of the License at
6    *
7    *     http://www.apache.org/licenses/LICENSE-2.0
8    *
9    * Unless required by applicable law or agreed to in writing, software
10   * distributed under the License is distributed on an "AS IS" BASIS,
11   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12   * See the License for the specific language governing permissions and
13   * limitations under the License.
14   */
15  
16  package org.acegisecurity.providers.encoding;
17  
18  import org.apache.commons.codec.binary.Base64;
19  import org.apache.commons.codec.digest.DigestUtils;
20  
21  
22  /***
23   * <p>
24   * MD5 implementation of PasswordEncoder.
25   * </p>
26   * 
27   * <p>
28   * If a <code>null</code> password is presented, it will be treated as an empty
29   * <code>String</code> ("") password.
30   * </p>
31   * 
32   * <P>
33   * As MD5 is a one-way hash, the salt can contain any characters.
34   * </p>
35   *
36   * @author colin sampaleanu
37   * @author Ben Alex
38   * @version $Id: Md5PasswordEncoder.java,v 1.4 2005/11/17 00:55:49 benalex Exp $
39   */
40  public class Md5PasswordEncoder extends BaseDigestPasswordEncoder
41      implements PasswordEncoder {
42      //~ Methods ================================================================
43  
44      public boolean isPasswordValid(String encPass, String rawPass, Object salt) {
45          String pass1 = "" + encPass;
46          String pass2 = encodeInternal(mergePasswordAndSalt(rawPass, salt, false));
47  
48          return pass1.equals(pass2);
49      }
50  
51      public String encodePassword(String rawPass, Object salt) {
52          return encodeInternal(mergePasswordAndSalt(rawPass, salt, false));
53      }
54  
55      private String encodeInternal(String input) {
56          if (!getEncodeHashAsBase64()) {
57              return DigestUtils.md5Hex(input);
58          }
59  
60          byte[] encoded = Base64.encodeBase64(DigestUtils.md5(input));
61  
62          return new String(encoded);
63      }
64  }