public interface PasswordDigest
getPasswordDigest
interface allows an authentication provider
to return a digest for a specified user's password.Modifier and Type | Method | Description |
---|---|---|
byte[] |
getPasswordDigest(java.lang.String username,
byte[] seed,
int numBytes) |
Returns the digest value for the password for the specified username.
|
byte[] getPasswordDigest(java.lang.String username, byte[] seed, int numBytes) throws DigestNotAvailableException
P_SHA-1(secret, seed) = HMAC_SHA-1(secret, A(1) + seed) + HMAC_SHA-1(secret, A(2) + seed) + HMAC_SHA-1(secret, A(3) + seed) + ...Where:
+
indicates concatenation andA()
is defined as:A(0) = seed
andA(i) = HMAC_SHA-1 (secret, A(I-1))
.
This digest functionality is currently used by the web services container.
username
- String containing the userseed
- byte array of random valuenumBytes
- int number of bytes to return in password digestDigestNotAvailableException