Tag Archives: authentication
Quick tip: upgrade a legacy password storage scheme
This one’s a Spring Security quick tip that I wanted to share. Suppose that you have a password storage scheme that stores passwords as plaintext, and you want to upgrade that to storing hashes. No problem; simply replace the plaintext … Continue reading
Posted in Chapter 06 - Authentication, Quick Tips
Tagged authentication, hash, password, salt, spring security
Leave a comment
Hashing and salting passwords with Spring Security 2
This post was originally written as a recipe for our book Spring in Practice, but we just didn’t have enough room to include it. It’s still (we think, anyway) a great recipe, so we’re making it available here free of … Continue reading
Posted in Chapter 06 - Authentication, Tutorials
Tagged authentication, cryptography, hash, salt, security, spring security
15 Comments
We’ve been MEAPed – chapters 4 & 5 available
We’re very excited to announce that we’ve been MEAPed. :-) MEAP is the Manning Early Access Program. MEAP allows you to buy the book before it’s actually done so you can start getting at the content as it becomes available. … Continue reading
Excerpt: Login and remember-me discussion
Spring in Practice centers on using Spring to implement technical solutions to common problems, but it’s also important for developers to understand the problem they’re trying to solve before implementing a solution. In the book we work pretty hard to … Continue reading
Posted in Chapter 06 - Authentication, News
Tagged authentication, login, openid, passwords, remember-me, security, spring security, sso
Leave a comment
Storing passwords securely
When dealing with user account information, there are lots of different security concerns that come up. Some examples include making sure users use strong passwords, preventing automated registrations, helping end users distinguish real sites from phishing sites, transmitting user data … Continue reading
Posted in Chapter 06 - Authentication, Tutorials
Tagged authentication, cryptography, hash, password, salt, security
12 Comments
Setting up public key authentication (PKA) over SSH
I assume you already know the whys, concepts, and terminology; this is just a statement of the steps involved. I’m using OpenSSH and a DSA key pair. Step 1 Generate a key pair: ssh-keygen -t dsa Generating public/private dsa key … Continue reading
