[SHIRO-186] Credentials Hashing: AuthenticationInfo should be able to return a salt for credentials comparison

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0
• Fix Version/s: 1.1.0
• Component/s: Authentication (log-in), Cryptography & Hashing
• Assignee: Les Hazlewood
• Reporter: Les Hazlewood
• Created: 18/Jul/10 22:36
• Updated: 26/Jun/11 21:51
• Resolved: 28/Oct/10 17:12

Description

When hashing credentials, the CredentialsMatcher must be able to acquire a salt from the AuthenticationInfo returned from the realm since salts are account/user-specific.

The HashedCredentialsMatcher should be updated to acquire the salt, if it exists, from the AuthenticationInfo and use that to perform a hash before comparing credentials.

Issue Links

• duplicates: SHIRO-176 AuthenticationInfo instances should be able to return stored salt