Category: Spring Security

In the last post we successfully secured our password, but there is a problem with that approach. Consider a scenario where two users have same password, our hashing mechanism can lead both password to be hashed with the same value, thus resulting in a security hole. It is now normal to use salt while hashing…

We have already seen how to use Spring Security and custom database for authentication in earlier post. But that implementation is saving password as plaintext, which is not an option at all. Both our user admin and guest are essential for application to run, in a usual scenario when an application is deployed, setting up…

In the last tutorial we used default database configuration required by Spring Security and we moved out of hard coded user credentials. But there is every possibility that their is already a existing database for user management and we cannot create new tables as required by Spring Security default behavior. This can be achieved very…

We will add on to our last remember me tutorial. In this tutorial instead of hard coded username, password we will add JDBC default support provided by Spring. First we will update jsfspring-sec-bean-config.xml and add datasource property. In this tutorial we will use MySQL. jsfspring-sec-bean-config.xml [sourcecode language=”xml”] <?xml version="1.0" encoding="UTF-8"?> <beans:beans xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance&quot; xmlns:beans="http://www.springframework.org/schema/beans&quot; xmlns:sec="http://www.springframework.org/schema/security&quot; xsi:schemaLocation="…