org.sterl.hash:spring-hash-lib

Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/

License	License The Apache Software License, Version 2.0
GroupId	GroupId org.sterl.hash
ArtifactId	ArtifactId spring-hash-lib
Last Version	Last Version 0.1.0
Release Date	Release Date Oct 26, 2020
Type	Type jar
Description	Description Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/

Download spring-hash-lib

Filename	Size
spring-hash-lib-0.1.0.pom
spring-hash-lib-0.1.0.jar	3 KB
spring-hash-lib-0.1.0-sources.jar	3 KB
spring-hash-lib-0.1.0-javadoc.jar	25 KB
Browse

How to add to project

Apache Maven

<!-- https://jarcasting.com/artifacts/org.sterl.hash/spring-hash-lib/ -->
<dependency>
    <groupId>org.sterl.hash</groupId>
    <artifactId>spring-hash-lib</artifactId>
    <version>0.1.0</version>
</dependency>

Gradle Groovy

// https://jarcasting.com/artifacts/org.sterl.hash/spring-hash-lib/
implementation 'org.sterl.hash:spring-hash-lib:0.1.0'

Gradle Kotlin

// https://jarcasting.com/artifacts/org.sterl.hash/spring-hash-lib/
implementation ("org.sterl.hash:spring-hash-lib:0.1.0")

Apache Buildr

'org.sterl.hash:spring-hash-lib:jar:0.1.0'

Apache Ivy

<dependency org="org.sterl.hash" name="spring-hash-lib" rev="0.1.0">
  <artifact name="spring-hash-lib" type="jar" />
</dependency>

Groovy Grape

@Grapes(
@Grab(group='org.sterl.hash', module='spring-hash-lib', version='0.1.0')
)

Scala SBT

libraryDependencies += "org.sterl.hash" % "spring-hash-lib" % "0.1.0"

Leiningen

[org.sterl.hash/spring-hash-lib "0.1.0"]

Dependencies

compile (1)

Group / Artifact	Type	Version
org.sterl.hash : hash-lib	jar	0.1.0

provided (2)

Group / Artifact	Type	Version
org.projectlombok : lombok	jar	1.18.14
org.springframework.boot : spring-boot-starter-security	jar	2.3.4.RELEASE

test (1)

Group / Artifact	Type	Version
org.junit.jupiter : junit-jupiter	jar

Project Modules

There are no modules declared in this project.

Hash Lib Cli

Tool to create BCrypt and PBKDF2 hashes of passwords directly in the command line:

Download latest version of hash-cli here: https://github.com/sterlp/hash/releases

Create a BCrpyt password hash

java -jar hash-cli.jar mypassword
> $2a$10$m4hjjVjjGD36bgHlblJaweMDrGelSO1lx4osfpNi/7DN9ZvTzMqA6

Create a Hash with a specific algorithm

java -jar hash-cli.jar -a PBKDF2WithHmacSHA512 -p mypassword
> PBKDF2WithHmacSHA512:2048:ilIYz4CirlKeZfa59Tu9Dlruc69zaAxGyDb0OOcpppM=:HMv6yD8WUKSM2XY6jHIuzz9ShXX1wj120Njb0TptJ6hBBWAFnOdx0xR1hvz9ICtp91sdBxRaMyU8LsYZCIuP9g==

Verify a password hash

java -jar hash-cli.jar -a PBKDF2WithHmacSHA512 -p mypassword -h PBKDF2WithHmacSHA512:2048:ilIYz4CirlKeZfa59Tu9Dlruc69zaAxGyDb0OOcpppM=:HMv6yD8WUKSM2XY6jHIuzz9ShXX1wj120Njb0TptJ6hBBWAFnOdx0xR1hvz9ICtp91sdBxRaMyU8LsYZCIuP9g==
> true

hash-lib

Common lib which provides a common Hash algorithms for JEE and Spring Boot:

BCrypt
PBKDF2WithHmacSHA224
PBKDF2WithHmacSHA256
PBKDF2WithHmacSHA384
PBKDF2WithHmacSHA512

jee-hash-lib

Support BCrypt and PBKDF2 password hash and verification. As so be compatible with existing JEE JDBC user stores and Spring Boot user stores.

Usage

import javax.annotation.security.DeclareRoles;
import javax.enterprise.context.ApplicationScoped;
import javax.security.enterprise.authentication.mechanism.http.BasicAuthenticationMechanismDefinition;
import javax.security.enterprise.identitystore.DatabaseIdentityStoreDefinition;
import javax.ws.rs.ApplicationPath;
import javax.ws.rs.core.Application;
import org.sterl.jee.hash.BCryptAndPbkdf2PasswordHash;

@ApplicationScoped
@BasicAuthenticationMechanismDefinition(realmName = "jee-basic")
@DeclareRoles({ "admin", "user" }) // this authorities are allowed
@DatabaseIdentityStoreDefinition(
    callerQuery = "select password from users where enabled = true AND username = ?",
    groupsQuery = "select authority from authorities where username = ?",
    dataSourceLookup = "jdbc/identity-store",
    hashAlgorithm = BCryptAndPbkdf2PasswordHash.class,
    hashAlgorithmParameters = {
        "Algorithm=PBKDF2WithHmacSHA512"
    }
)
@ApplicationPath("")
public class ApplicationConfiguration extends Application {
    
}

Maven import JEE

<dependency>
  <groupId>org.sterl.hash</groupId>
  <artifactId>jee-hash-lib</artifactId>
  <version>0.1.0</version>
</dependency>

Base Lib

<dependency>
  <groupId>org.sterl.hash</groupId>
  <artifactId>hash-lib</artifactId>
  <version>0.1.0</version>
</dependency>

How to release

mvn versions:set -DnewVersion=x.x.x-SNAPSHOT
mvn clean install -Prelease
mvn deploy

Versions

Version
0.1.0 Oct 26, 2020