Spring Security Encrypt MD5
encryption, passwords, spring-security
Solution
How are you creating your MD5 hashes? Something like the following works well in Java:
MessageDigest messageDigest = MessageDigest.getInstance("MD5");
messageDigest.update(user.getPassword().getBytes(),0, user.getPassword().length());
String hashedPass = new BigInteger(1,messageDigest.digest()).toString(16);
if (hashedPass.length() < 32) {
hashedPass = "0" + hashedPass;
}
When you encode "koala" do you get "a564de63c2d0da68cf47586ee05984d7"?
Problem
I have a java web application using spring framework and spring security for its login. In my database I have my passwords encrypted to MD5 before being saved. I added in my application-config.xml this codes ``` <security:authentication-provider> <security:password-encoder hash="md5"/> <security:jdbc-user-service data-source-ref="dataSource" users-by-username-query="select user_name username, user_password password, 1 enabled from users where user_name=?" authorities-by-username-query="select username, authority from authorities where username=?" /> </security:authentication-provider> ``` At first It worked when the password in the db were not encrypted. But when I encrypted it and added this snippet in my application config ``` <security:password-encoder hash="md5"/> ``` I am not able to login.