Spring | How to encode login password before sending to server -


I'm using spring protection for my web application I want to change password text coded before sending it to server Am Here's my code below:

spring-security.xml

  & lt ;! - Authority Manager - & gt; & Lt; Authentication-manager aliases = "authentication manager" & gt; & Lt ;! - Authorization Provider - & gt; & Lt ;! - Remind Me Authentication Provider - & gt; & Lt; Authentication Provider Ref = "Remember MeAuthenticationProvider" & gt; & Lt; / Authentication Provider & gt; & Lt ;! - Authorization Provider JDBC User Management Service - & gt; & Lt; Authentication Provider User-Service-Rif = "jdbcUserService" & gt; & Lt ;! - SHA-1 Password Encoding Scheme to Protect User Credential - & gt; & Lt; Password-EncoderRiff = "Shadow Password Encoder" /> & Lt; / Authentication Provider & gt; & Lt; / Authentication-manager & gt; & Lt ;! - SHA-1 Password Encoder - & gt; & Lt; Bean id = "shadow password encoder" class = "org.springframework.security.authentication.encoding.ShaPasswordEncoder" & gt; & Lt; Constructor-arg value = "256" /> & Lt; / Bean & gt;   

Even after using this, I still get a password in the plain text format on the server side, I need a password in the encoded form using spring protection on server security.

I have stored the password in the database in encrypted form. I am starting for spring, so this question is simple and I am missing from some basic things. Any reference implementation will be helpful.

Thanks in advance.

Try encrypting passwords in the browser in some way

but the user's Be sure to use some type of salt on the basis (which

PS: If you are not using TLS / SSL, then this is not doing the same. To understand, and if you Already using it, I think there is no need to try it unless your The application does not require nearly manic level of security.

Ref:

Comments

Popular posts from this blog

Verilog Error: output or inout port "Q" must be connected to a structural net expression -

jasper reports - How to center align barcode using jasperreports and barcode4j -

c# - ASP.NET MVC - Attaching an entity of type 'MODELNAME' failed because another entity of the same type already has the same primary key value -