search

kolorobot / spring-mvc-quickstart-archetype

The project is a Maven archetype for Spring MVC web application.
http://blog.codeleak.pl
1.05k stars 478 forks source link

switch to BCryptPasswordEncoder from StandardPasswordEncoder #118

Closed m-abboud closed 8 years ago

m-abboud commented 8 years ago

BCryptPasswordEncoder is superior to StandardPasswordEncoder. Stronger security and is standardized so it's compatible with other apps using different languages and frameworks.

See: http://stackoverflow.com/questions/17444258/how-to-use-new-passwordencoder-from-spring-security

And this comment at the top of the StandardPasswordEncoder.java file:

If you are developing a new system, {@link org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder} is a better choice both in terms of security and interoperability with other languages.

kolorobot commented 8 years ago

@m-abboud Thank you. Your are absolutely right.