com.google.gerrit.server.account

Class HashedPassword

java.lang.Object

com.google.gerrit.server.account.HashedPassword

public class HashedPassword
extends Object

Holds logic for salted, hashed passwords. It uses BCrypt from BouncyCastle, which truncates passwords at 72 bytes.

Method Summary

Modifier and Type	Method and Description
boolean	checkPassword(String password)
static HashedPassword	decode(String encoded) decodes a hashed password encoded with encode().
String	encode() Serialize the hashed password and its parameters for persistent storage.
static HashedPassword	fromPassword(String password)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

decode

public static HashedPassword decode(String encoded)
                             throws org.apache.commons.codec.DecoderException

decodes a hashed password encoded with encode().

Throws:

org.apache.commons.codec.DecoderException - if input is malformed.

fromPassword

public static HashedPassword fromPassword(String password)

encode

public String encode()

Serialize the hashed password and its parameters for persistent storage.

Returns:

one-line string encoding the hash and salt.

checkPassword

public boolean checkPassword(String password)