com.konakart.util

Class Security

java.lang.Object

com.konakart.util.Security

public class Security
extends java.lang.Object

Class for managing password encryption. You may customize this class by adding your own encryption algorithm.

Constructor Summary

Constructors

Constructor and Description
Security()

Method Summary

Modifier and Type	Method and Description
static boolean	checkPassword(java.lang.String dbPassword, java.lang.String password) Compare the hashed password from the DB with the one in clear text provided by the user.
static java.lang.String	encrypt(java.lang.String password) Encrypts the password using the chosen algorithm and returns the encrypted password.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Security

public Security()

Method Detail

encrypt

public static java.lang.String encrypt(java.lang.String password)
                                throws java.security.NoSuchAlgorithmException

Encrypts the password using the chosen algorithm and returns the encrypted password.

Parameters:

password - in clear text

Returns:

Returns an encrypted password

Throws:

java.security.NoSuchAlgorithmException - thrown if the chosen algorithm isn't available.

checkPassword

public static boolean checkPassword(java.lang.String dbPassword,
                                    java.lang.String password)
                             throws java.security.NoSuchAlgorithmException

Compare the hashed password from the DB with the one in clear text provided by the user. The clear text password must be encrypted using the chosen algorithm and then compared with the hashed password stored in the database.

Parameters:

dbPassword - raw encrypted password value from the database

password - the password in clear text as entered by the user

Returns:

Returns true if the password matches the one in the database. Otherwise returns false.

Throws:

java.security.NoSuchAlgorithmException - thrown if the chosen algorithm isn't available.