Marco Mistroni wrote:
Hello Ben,
thanks for your reply....
so if i don't use saltSource or passwordEncoder then i don't need to
encrypt anything, is that correct?
because i want to be able to add my users programmatically via web
interface, and at the same time i want to encrypt their password in
the database..
what i am missing is how to get the encrypted value.... sorry maybe
it's a little off-topic but i am little new to encryption & security..
Hi Macro
When you initially save the password to your database, you'll need to
perform the one-way hash. Just use the public method provided by your
chosen PasswordEncoder implementation to do this.
Best regards
Ben
-------------------------------------------------------
This SF.Net email is sponsored by Oracle Space Sweepstakes
Want to be the first software developer in space?
Enter now for the Oracle Space Sweepstakes!
http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click
_______________________________________________
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
