Hi all,
I have a problem when using JSON Authentication with Password Encoding.
I used both CAS versions 5.3.2 and 5.3.3, and below is the used config:
*Properties:*
cas.authn.json.location=file:/path_xx/users-SHA-256.json
#cas.authn.json.name=
cas.authn.json.passwordEncoder.type=DEFAULT
cas.authn.json.passwordEncoder.encodingAlgorithm=SHA-256
cas.authn.json.passwordEncoder.characterEncoding=UTF-8
JSON file:
{
"@class" : "java.util.LinkedHashMap",
"admin" : {
"@class" : "org.apereo.cas.adaptors.generic.CasUserAccount",
"password" :
"*8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918*",
"attributes" : {
"@class" : "java.util.LinkedHashMap",
"kkkkkk" : "vvvvvvv"
},
"status" : "OK",
"expirationDate" : "2019-12-31"
}
}
*Log:*
2018-09-12 21:29:49,399 DEBUG
[org.apereo.cas.util.crypto.DefaultPasswordEncoder] - <Using [UTF-8] as the
character encoding algorithm to update the digest>
2018-09-12 21:29:49,402 DEBUG
[org.apereo.cas.util.crypto.DefaultPasswordEncoder] - <Encoded password via
algorithm [SHA-256] and character-encoding [UTF-8] is
[8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918]>
2018-09-12 21:29:49,430 DEBUG
[org.apereo.cas.util.crypto.DefaultPasswordEncoder] - <Using [UTF-8] as the
character encoding algorithm to update the digest>
2018-09-12 21:29:49,431 DEBUG
[org.apereo.cas.util.crypto.DefaultPasswordEncoder] - <Encoded password via
algorithm [SHA-256] and character-encoding [UTF-8] is
[998ed4d621742d0c2d85ed84173db569afa194d4597686cae947324aa58ab4bb]>
2018-09-12 21:29:49,431 DEBUG
[org.apereo.cas.util.crypto.DefaultPasswordEncoder] - <Provided password
does not match the encoded password>
*Problem:*
According to the debug info, CAS encodes the password *twice*, and the
second encoding is wrong. I don't understand how it is produced.
I used as password '*admin*', which SHA-256 encoding is
*8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918*.
But CAS considers the second encoding, i.e.,
*998ed4d621742d0c2d85ed84173db569afa194d4597686cae947324aa58ab4bb* (when I
use this encoding it works).
*Thank you in advance for your help :)*
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/4fb02cde-2a9a-43ee-a127-e01accfcc494%40apereo.org.
