quarkusio / quarkus

Quarkus: Supersonic Subatomic Java.
https://quarkus.io
Apache License 2.0
13.72k stars 2.66k forks source link

Make io.quarkus.security.common available as standalone #7988

Closed zulq closed 4 years ago

zulq commented 4 years ago

Would like to use the io.quarkus.security.common.BcryptUtil for password hashing with JWT instead of security-jpa. Currently ussing spring-security-crypto.

dmlloyd commented 4 years ago

You could use the underlying library, org.wildfly.security:wildfly-elytron-credential. If you look at the source of BcryptUtil, the usage should be fairly obvious.

zulq commented 4 years ago

@dmlloyd added the package but can't locate BcryptUtil.

dmlloyd commented 4 years ago

It's not a package, it's an artifact, and BcryptUtil isn't in there. As I said, if you look at the source of BcryptUtil you can see the underlying API that it is using.

zulq commented 4 years ago

@dmlloyd, ref link please.

sberyozkin commented 4 years ago

@zulq what JWA algorithm do you use with JWT ?

zulq commented 4 years ago

using the in-built quarkus JWT generator. See sample here: Quarkus JWT

zulq commented 4 years ago

Figured out this is found in quarkus-elytron-security-common.