[gatein-pull-requests] [gatein/gatein-portal] 0ee52c: GTNPORTAL-2473 Encrypt password in CookieTokenServ...

Branch: refs/heads/3.5.x Home: https://github.com/gatein/gatein-portal Commit: 0ee52c38823b2e3b6eaab3ee9ae5f46aaaed7b12 https://github.com/gatein/gatein-portal/commit/0ee52c38823b2e3b6eaab3ee9a... Author: Peter Palaga <ppalaga(a)redhat.com&gt; Date: 2013-03-08 (Fri, 08 Mar 2013) Changed paths: A component/web/security/.gitignore M component/web/security/pom.xml M component/web/security/src/main/java/conf/autologin-nodetypes.xml M component/web/security/src/main/java/org/exoplatform/web/login/LoginServlet.java A component/web/security/src/main/java/org/exoplatform/web/security/codec/AbstractCodec.java A component/web/security/src/main/java/org/exoplatform/web/security/codec/AbstractCodecBuilder.java A component/web/security/src/main/java/org/exoplatform/web/security/codec/JCASymmetricCodec.java A component/web/security/src/main/java/org/exoplatform/web/security/codec/JCASymmetricCodecBuilder.java A component/web/security/src/main/java/org/exoplatform/web/security/codec/NoCodec.java A component/web/security/src/main/java/org/exoplatform/web/security/hash/JCASaltedHashService.java A component/web/security/src/main/java/org/exoplatform/web/security/hash/NoSaltedHashService.java A component/web/security/src/main/java/org/exoplatform/web/security/hash/SaltedHash.java A component/web/security/src/main/java/org/exoplatform/web/security/hash/SaltedHashCodec.java A component/web/security/src/main/java/org/exoplatform/web/security/hash/SaltedHashEncodingException.java A component/web/security/src/main/java/org/exoplatform/web/security/hash/SaltedHashException.java A component/web/security/src/main/java/org/exoplatform/web/security/hash/SaltedHashService.java A component/web/security/src/main/java/org/exoplatform/web/security/hash/XmlSafeSaltedHashCodec.java R component/web/security/src/main/java/org/exoplatform/web/security/security/AbstractCodec.java M component/web/security/src/main/java/org/exoplatform/web/security/security/AbstractTokenService.java A component/web/security/src/main/java/org/exoplatform/web/security/security/AutoReseedRandom.java A component/web/security/src/main/java/org/exoplatform/web/security/security/CookieToken.java M component/web/security/src/main/java/org/exoplatform/web/security/security/CookieTokenService.java A component/web/security/src/main/java/org/exoplatform/web/security/security/HashedToken.java A component/web/security/src/main/java/org/exoplatform/web/security/security/PlainTokenService.java M component/web/security/src/main/java/org/exoplatform/web/security/security/RemindPasswordTokenService.java M component/web/security/src/main/java/org/exoplatform/web/security/security/TicketConfiguration.java R component/web/security/src/main/java/org/exoplatform/web/security/security/ToThrowAwayCodec.java M component/web/security/src/main/java/org/exoplatform/web/security/security/TokenContainer.java A component/web/security/src/main/java/org/exoplatform/web/security/security/TokenException.java M component/web/security/src/main/java/org/exoplatform/web/security/security/TokenExistsException.java A component/web/security/src/main/java/org/exoplatform/web/security/security/TokenParseException.java A component/web/security/src/main/java/org/exoplatform/web/security/security/TokenServiceInitializationException.java M component/web/security/src/main/java/org/exoplatform/web/security/security/TransientTokenService.java A component/web/security/src/test/java/org/exoplatform/web/security/AbstractCookieTokenServiceTest.java M component/web/security/src/test/java/org/exoplatform/web/security/AbstractTokenServiceTest.java M component/web/security/src/test/java/org/exoplatform/web/security/SimpleGeneratorCookieTokenService.java R component/web/security/src/test/java/org/exoplatform/web/security/TestCookieService.java A component/web/security/src/test/java/org/exoplatform/web/security/TestHashingCookieTokenService.java A component/web/security/src/test/java/org/exoplatform/web/security/TestPlainCookieTokenService.java M component/web/security/src/test/java/org/exoplatform/web/security/TestSimpleGeneratorService.java M component/web/security/src/test/java/org/exoplatform/web/security/TestTransientTokenService.java A component/web/security/src/test/java/org/exoplatform/web/security/codec/TestJCASymmetricCodec.java A component/web/security/src/test/java/org/exoplatform/web/security/hash/TestJCASaltedHashService.java A component/web/security/src/test/java/org/exoplatform/web/security/hash/TestXmlSafeSaltedHashCodec.java A component/web/security/src/test/resources/conf/key.txt M component/web/security/src/test/resources/conf/token-nodetypes.xml M component/web/security/src/test/resources/conf/tokenservice-configuration.xml M gadgets/core/src/main/java/org/exoplatform/portal/gadget/core/GadgetTokenInfoService.java M gadgets/core/src/test/java/org/exoplatform/portal/gadget/TestGadgetTokenInfoService.java M web/portal/src/main/webapp/WEB-INF/conf/common/autologin-configuration.xml M web/portal/src/main/webapp/WEB-INF/conf/common/remindpwd-configuration.xml Log Message: ----------- GTNPORTAL-2473 Encrypt password in CookieTokenService and store salted hashes instead of plain tokens New JCR mixin node type is used to stay as backwards compatible as possible. Commit: 999100e06d36a6ab353f86f79063c54d904543a6 https://github.com/gatein/gatein-portal/commit/999100e06d36a6ab353f86f790... Author: Peter Palaga <ppalaga(a)redhat.com&gt; Date: 2013-03-08 (Fri, 08 Mar 2013) Changed paths: M component/web/security/pom.xml M component/web/security/src/main/java/org/exoplatform/web/security/hash/JCASaltedHashService.java M component/web/security/src/main/java/org/exoplatform/web/security/hash/NoSaltedHashService.java M component/web/security/src/main/java/org/exoplatform/web/security/hash/SaltedHashService.java M component/web/security/src/main/java/org/exoplatform/web/security/security/AbstractTokenService.java M component/web/security/src/main/java/org/exoplatform/web/security/security/AutoReseedRandom.java M component/web/security/src/main/java/org/exoplatform/web/security/security/CookieTokenService.java A component/web/security/src/main/java/org/exoplatform/web/security/security/SecureRandomService.java A component/web/security/src/test/java/org/exoplatform/web/security/TestSecureRandomService.java M component/web/security/src/test/java/org/exoplatform/web/security/hash/TestJCASaltedHashService.java A component/web/security/src/test/resources/conf/secure-random-service-configuration.xml M component/web/security/src/test/resources/conf/tokenservice-configuration.xml M web/portal/src/main/webapp/WEB-INF/conf/common/autologin-configuration.xml Log Message: ----------- GTNPORTAL-2828 CookieTokenService initialization too slow Compare: https://github.com/gatein/gatein-portal/compare/96baf4bcd2b7...999100e06d36