/* * Copyright (c) 1998-2011 Caucho Technology -- all rights reserved * * This file is part of Resin(R) Open Source * * Each copy or derived work must preserve the copyright notice and this * notice unmodified. * * Resin Open Source is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * Resin Open Source is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE, or any warranty * of NON-INFRINGEMENT. See the GNU General Public License for more * details. * * You should have received a copy of the GNU General Public License * along with Resin Open Source; if not, write to the * * Free Software Foundation, Inc. * 59 Temple Place, Suite 330 * Boston, MA 02111-1307 USA * * @author Scott Ferguson */ package com.caucho.server.security; import com.caucho.config.ConfigException; import com.caucho.util.Base64; import com.caucho.util.CharBuffer; import com.caucho.util.L10N; import javax.annotation.PostConstruct; import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.security.MessageDigest; /** * Calculates a digest for the user and password. * * <p>If the realm is missing, the digest will calculate: * <code><pre> * MD5(user + ':' + password) * </pre></code> * * <p>If the realm is specified, the digest will calculate: * <code><pre> * MD5(user + ':' + realm + ':' + password) * </pre></code> * * <p>The second version matches the way HTTP digest authentication * is handled, so it is the preferred method for storing passwords. * * <p>The returned result is the base64 encoding of the digest. */ public class PasswordDigest extends com.caucho.security.PasswordDigest { }