]
Jan Kalina updated ELY-1582:
----------------------------
Summary: Support hex encoding in jdbc-realm for elytron (was: [GSS](7.2) Support hex
encoding in jdbc-realm for elytron)
Support hex encoding in jdbc-realm for elytron
----------------------------------------------
Key: ELY-1582
URL:
https://issues.jboss.org/browse/ELY-1582
Project: WildFly Elytron
Issue Type: Feature Request
Components: Realms
Affects Versions: 1.3.2.Final
Reporter: Jan Kalina
Assignee: Jan Kalina
Labels: elytron
Fix For: 1.4.0.CR1
Old database login-module can be configured passing the attribute {{hashEncoding}}, for
example:
{code:xml}
<login-module code="Database" flag="required">
<module-option name="dsJndiName"
value="java:jboss/datasources/ExampleDS"/>
<module-option name="principalsQuery" value="SELECT password FROM
User WHERE username = ?"/>
<module-option name="rolesQuery" value="SELECT role,
'Roles' FROM User WHERE username = ?"/>
<module-option name="hashAlgorithm" value="SHA-1"/>
<module-option name="hashEncoding" value="hex"/>
<module-option name="hashCharset" value="UTF-8"/>
</login-module>
{code}
Currently jdbc-realm in elytron only uses base64 encoding if hash is stored in a text
column. This way the migration is more complicated cos the password hash is not valid
changing from old security system to elytron.
Think also about the charset attribute.