Java BCrypt.checkpw方法代码示例

import org.springframework.security.crypto.bcrypt.BCrypt; //导入方法依赖的package包/类
public boolean verify(final String value, final CipherAlgorithm cipherAlgorithm, final String encodedValue) {
    boolean res = false;

    try {
        if (value != null) {
            if (cipherAlgorithm == null || cipherAlgorithm == CipherAlgorithm.AES) {
                res = encode(value, cipherAlgorithm).equals(encodedValue);
            } else if (cipherAlgorithm == CipherAlgorithm.BCRYPT) {
                res = BCrypt.checkpw(value, encodedValue);
            } else {
                res = getDigester(cipherAlgorithm).matches(value, encodedValue);
            }
        }
    } catch (Exception e) {
        LOG.error("Could not verify encoded value", e);
    }

    return res;
}
 

import org.springframework.security.crypto.bcrypt.BCrypt; //导入方法依赖的package包/类
/**
 * Login user.
 *
 * @param message
 *          the message
 * @return the response
 */
protected Response loginUser(UserMessage message) {
  String userName = message.getUserName();
  User user = assist.expectedUser(userName);

  SystemIdKey id = message.getSystemId();
  switch (user.getState()) {
  case ACTIVE:
    break;
  default:
    fail(getResponseContext(CANNOT_DELETE_USER, id), userName + " is in state " + user.getState());
  }

  boolean ok = BCrypt.checkpw(message.getOldPassword(), user.getPasswordHash());

  log.info("Login for {} is {}", userName, ok);

  setLocale(message);

  //@formatter:off
  return ok ? 
      createSession(message, user) : 
      failure(getResponseContext(INVALID_PASSWORD, id), message, "Password is invalid");
  //@formatter:on
}
 

import org.springframework.security.crypto.bcrypt.BCrypt; //导入方法依赖的package包/类
static boolean authenticate(String username, String password) {
	boolean authenticated = false;
	if (Properties.getString("ldap.server") == null) {
		Person user = Person.find("byUsername", username).first();
		authenticated = user != null && user.password != null && BCrypt.checkpw(password, user.password);
	} else {
		if (!password.isEmpty()) {
			Hashtable<String, String> env = new Hashtable<String, String>();
			env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
			env.put(Context.PROVIDER_URL, Properties.getString("ldap.server"));
			env.put(Context.SECURITY_PRINCIPAL, String.format("%[email protected]%s", username, Properties.getString("ldap.domain")));
			env.put(Context.SECURITY_CREDENTIALS, password);
			try {
				new InitialDirContext(env);
				authenticated = true;
			} catch (NamingException e) {
				Logger.info("LDAP authentication failed for %s", username);
			}
		}
	}
	return authenticated;
}
 

import org.springframework.security.crypto.bcrypt.BCrypt; //导入方法依赖的package包/类
private void validatePassword(final String receiverId, final String password,
                              final ReceiverMessage receiverMessage) {

    if (receiverMessage.getPassword() == null) {
        throw new IllegalStateException("Message is not password protected");
    }

    final int decryptAttempts = receiverMessage.incrementDecryptAttempt();

    receiverMsgRepository.update(receiverMessage.getId(), receiverMessage);

    if (BCrypt.checkpw(password, receiverMessage.getPassword())) {
        return;
    }

    // invalid password ...

    if (decryptAttempts > 2) {
        // burn if too many failed attempts
        receiverMsgRepository.delete(receiverId);

        // inform the sender about invalidation
        updateSenderMessageInvalidated(receiverMessage.getSenderId());

        throw new MessageNotFoundException();
    }

    throw new IllegalStateException("Incorrect password");
}
 

import org.springframework.security.crypto.bcrypt.BCrypt; //导入方法依赖的package包/类
private Filter tokenProcessingFilter() {
	return new BasicAuthenticationFilter(new AuthenticationManager() {
		
		@Override
		public Authentication authenticate(Authentication authentication)
				throws AuthenticationException {
			User user = userRepository.findByEmail(authentication.getName());
			if (user == null || user.getUsr() == null) {
				throw new BadCredentialsException("Invalid credentials! \n\n Please, login again.");
			}
			String token = user.getUsr().getDeviceToken();
			String credentials = (String) authentication.getCredentials();
			try {
				if(!BCrypt.checkpw(token, credentials)) {
					throw new BadCredentialsException("Invalid credentials! \n\n Please, login again.");
				}
			} catch (IllegalArgumentException e) {
				throw new BadCredentialsException("Invalid credentials! \n\n Please, login again.");
			}
			Collection<GrantedAuthority> authorities = new ArrayList<GrantedAuthority>();
			authorities.add(new SimpleGrantedAuthority(user.getRole().name()));
			Authentication ret = new PreAuthenticatedAuthenticationToken(authentication.getPrincipal(), authentication.getCredentials(), authorities );
			return ret;
		}
	}) {
		@Override
		protected boolean isIgnoreFailure() {
			return true;
		}
	};
}
 

import org.springframework.security.crypto.bcrypt.BCrypt; //导入方法依赖的package包/类
@Override
public String login(String username, String password) {
    final UserDetails userDetails = userDetailsService.loadUserByUsername(username);
    if (userDetails == null) {
        return null;
    }
    if (!BCrypt.checkpw(password, userDetails.getPassword())) {
        return null;
    }
    final String token = jwtTokenUtil.generateToken(username);
    System.out.println(token);
    return token;
}
 

import org.springframework.security.crypto.bcrypt.BCrypt; //导入方法依赖的package包/类
@Override
public void changePassword(String oldPassword, String newPassword) {
  Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
  String currentUserName = authentication.getName();
  log.debug("Changing password of user: " + currentUserName);
  User user = userRepository.findFirstByUsername(currentUserName);
  if (!BCrypt.checkpw(oldPassword, user.getPassword())) {
    throw new UnauthorizedUserException("Old password is wrong.");
  }
  if (!(authentication instanceof AnonymousAuthenticationToken)) { // TODO is this line needed?
    user.setPassword(BCrypt.hashpw(newPassword, BCrypt.gensalt(12)));
    userRepository.save(user);
    log.debug("Password of user " + currentUserName + " has been changed successfully.");
  }
}
 

import org.springframework.security.crypto.bcrypt.BCrypt; //导入方法依赖的package包/类
@RequestMapping(value = "/login", method = RequestMethod.POST)
@ResponseBody
public LoggedUserModel login(@RequestBody LoginUserModel loginUserModel,
		HttpServletResponse response) {
	LoggedUserModel loggedUserModel = new LoggedUserModel();
	String username = loginUserModel.getUsername();
	UserModel user = userService.getUserByUsername(username);

	if (user == null) {
		throw new IllegalArgumentException("Username is incorect");
	}

	String password = loginUserModel.getPassword();

	if (BCrypt.checkpw(password, user.getPassword())) {
		String sessionKey = this.generateSessionKey(user.getId());
		user.setSessionKey(sessionKey);
		userService.update(user);
		loggedUserModel.setUsername(username);
		loggedUserModel.setSessionKey(sessionKey);
		loggedUserModel.setId(user.getId());
	} else {
		throw new IllegalArgumentException("Password is incorrect!");
	}

	return loggedUserModel;
}
 

import org.springframework.security.crypto.bcrypt.BCrypt; //导入方法依赖的package包/类
private boolean checkField(String plainValue, String encryptedValue, String encryptionType) {
		if (ONE_WAY_HINT.equals(encryptionType)) {
			return BCrypt.checkpw(plainValue, encryptedValue);
		} else if (TWO_WAY_HINT.equals(encryptionType)) {
			return encryptedValue.equals(encryptField(plainValue, encryptionType));
//			//	AES encryption, requires Java7
//			String[] splitted = encryptedValue.split(":");
//			TextEncryptor textEncryptor = Encryptors.queryableText(_password, splitted[1]);
//			return textEncryptor.encrypt(plainValue).equals(splitted[0]);
		}
		return false;
	}
 

import org.springframework.security.crypto.bcrypt.BCrypt; //导入方法依赖的package包/类
@Override
public boolean validatePassword(String password, String correctHash) throws CustomException {
	logger.trace("Validation du mot de passe avec BCrypt");
	return BCrypt.checkpw(password, correctHash);
}
 

import org.springframework.security.crypto.bcrypt.BCrypt; //导入方法依赖的package包/类
@Override
public boolean matches(CharSequence rawPassword, String encodedPassword) {
    return BCrypt.checkpw(rawPassword.toString(), encodedPassword);
}
 

import org.springframework.security.crypto.bcrypt.BCrypt; //导入方法依赖的package包/类
/**
 * Matches raw password and encoded password.
 *
 * @param rawPassword     raw password
 * @param encodedPassword encoded password
 * @return match or not
 */
@Override public boolean matches(CharSequence rawPassword, String encodedPassword) {
  String rawPwd = (String) rawPassword;
  return BCrypt.checkpw(rawPwd, encodedPassword);
}