Example usage for org.apache.commons.codec.digest DigestUtils sha

List of usage examples for org.apache.commons.codec.digest DigestUtils sha

Introduction

In this page you can find the example usage for org.apache.commons.codec.digest DigestUtils sha.

Prototype

@Deprecated
    public static byte[] sha(String data) 

Source Link

Usage

From source file:org.infoglue.cms.controllers.kernel.impl.simple.SystemUserController.java

public SystemUser update(SystemUserVO systemUserVO, String oldPassword, String[] roleNames, String[] groupNames,
        Database db) throws ConstraintException, SystemException, Exception {
    logger.info("systemUserVO:" + systemUserVO.getUserName());
    logger.info("oldPassword:" + oldPassword);
    logger.info("newPassword:" + systemUserVO.getPassword());
    logger.info("roleNames:" + roleNames);
    logger.info("groupNames:" + groupNames);
    if (CmsPropertyHandler.getUsePasswordEncryption()) {
        String password = systemUserVO.getPassword();
        try {//from ww w.  j a  v a 2  s.  com
            byte[] encryptedPassRaw = DigestUtils.sha(password);
            String encryptedPass = new String(Base64.encodeBase64(encryptedPassRaw), "ASCII");
            password = encryptedPass;
            systemUserVO.setPassword(password);

            byte[] encryptedOldPasswordRaw = DigestUtils.sha(oldPassword);
            String encryptedOldPassword = new String(Base64.encodeBase64(encryptedOldPasswordRaw), "ASCII");
            oldPassword = encryptedOldPassword;
        } catch (Exception e) {
            logger.error("Error generating password:" + e.getMessage());
        }
    }

    SystemUser systemUser = getSystemUser(db, systemUserVO.getUserName(), oldPassword);
    if (systemUser == null)
        throw new SystemException("Wrong user or password.");

    systemUserVO.setUserName(systemUser.getUserName());

    if (roleNames != null) {
        systemUser.getRoles().clear();
        for (int i = 0; i < roleNames.length; i++) {
            Role role = RoleController.getController().getRoleWithName(roleNames[i], db);
            systemUser.getRoles().add(role);
            role.getSystemUsers().add(systemUser);
        }
    }

    if (groupNames != null) {
        systemUser.getGroups().clear();
        for (int i = 0; i < groupNames.length; i++) {
            Group group = GroupController.getController().getGroupWithName(groupNames[i], db);
            systemUser.getGroups().add(group);
            group.getSystemUsers().add(systemUser);
        }
    }

    //systemUserVO.setPassword(systemUser.getPassword());
    systemUser.setValueObject(systemUserVO);

    return systemUser;
}

From source file:org.infoglue.cms.controllers.kernel.impl.simple.SystemUserController.java

public void updatePassword(String userName, Database db) throws ConstraintException, SystemException {
    SystemUser systemUser = getSystemUserWithName(userName, db);

    String newPassword = PasswordGenerator.generate();

    String password = newPassword;
    if (CmsPropertyHandler.getUsePasswordEncryption()) {
        try {//from  w w w . j  a v  a 2  s  .  c om
            byte[] encryptedPassRaw = DigestUtils.sha(password);
            String encryptedPass = new String(Base64.encodeBase64(encryptedPassRaw), "ASCII");
            password = encryptedPass;
        } catch (Exception e) {
            logger.error("Error generating password:" + e.getMessage());
        }
    }

    systemUser.setPassword(password);

    StringBuffer sb = new StringBuffer();
    sb.append("<div><h2>Password changed</h2></div>");
    sb.append("<div>CMS notification: You or an administrator have requested a new password for your account ("
            + userName + "). <br/>");
    sb.append("<br/>");
    sb.append("The new password is '" + newPassword + "'.<br/>");
    sb.append("<br/>");
    sb.append("Please notify the administrator if this does not work. <br/>");
    sb.append("<br/>");
    sb.append("-----------------------------------------------------------------------<br/>");
    sb.append("This email was automatically generated and the sender is the CMS-system. <br/>");
    sb.append("Do not reply to this email. </div>");

    String systemEmailSender = CmsPropertyHandler.getSystemEmailSender();
    if (systemEmailSender == null || systemEmailSender.equalsIgnoreCase(""))
        systemEmailSender = "InfoGlueCMS@" + CmsPropertyHandler.getMailSmtpHost();

    try {
        MailServiceFactory.getService().send(systemEmailSender, systemUser.getEmail(), null,
                "InfoGlue Information - Password changed!!", sb.toString());
    } catch (Exception e) {
        logger.error("The notification was not sent to [" + systemEmailSender + ", " + systemUser.getEmail()
                + "]. Reason:" + e.getMessage(), e);
    }
}

From source file:org.infoglue.cms.controllers.kernel.impl.simple.SystemUserController.java

public void updateAnonymousPassword(String userName, Database db) throws ConstraintException, SystemException {
    SystemUser systemUser = getSystemUserWithName(userName, db);
    String newPassword = "anonymous";

    String password = newPassword;
    if (CmsPropertyHandler.getUsePasswordEncryption()) {
        try {//from w  w  w  .j  a  v  a 2s.c o m
            byte[] encryptedPassRaw = DigestUtils.sha(password);
            String encryptedPass = new String(Base64.encodeBase64(encryptedPassRaw), "ASCII");
            password = encryptedPass;
        } catch (Exception e) {
            logger.error("Error generating password:" + e.getMessage());
        }
    }

    systemUser.setPassword(password);
}

From source file:org.infoglue.cms.controllers.kernel.impl.simple.SystemUserController.java

public void updatePassword(String userName, String oldPassword, String newPassword, Database db)
        throws ConstraintException, SystemException, Exception {
    if (newPassword == null)
        throw new ConstraintException("SystemUser.newPassword", "301");

    if (CmsPropertyHandler.getUsePasswordEncryption()) {
        try {/*from  w  w w  .  ja  v a2  s  .co m*/
            byte[] encryptedPassRaw = DigestUtils.sha(newPassword);
            String encryptedPass = new String(Base64.encodeBase64(encryptedPassRaw), "ASCII");
            newPassword = encryptedPass;

            byte[] encryptedOldPasswordRaw = DigestUtils.sha(oldPassword);
            String encryptedOldPass = new String(Base64.encodeBase64(encryptedOldPasswordRaw), "ASCII");
            oldPassword = encryptedOldPass;
        } catch (Exception e) {
            logger.error("Error generating password:" + e.getMessage());
        }
    }

    SystemUser systemUser = getSystemUser(db, userName, oldPassword);
    if (systemUser == null)
        throw new ConstraintException("SystemUser.oldPassword", "310");

    systemUser.setPassword(newPassword);
}

From source file:org.infoglue.cms.security.InfoGlueBasicAuthenticationModule.java

/**
 * This method authenticates against the infoglue extranet user database.
 *///from   www. j a v a  2s. c o  m

private boolean authenticate(String userName, String password, Map parameters) throws Exception {
    boolean isAuthenticated = false;

    String administratorUserName = CmsPropertyHandler.getAdministratorUserName();
    //String administratorPassword = CmsPropertyHandler.getAdministratorPassword();
    //boolean isAdministrator = (userName.equalsIgnoreCase(administratorUserName) && password.equalsIgnoreCase(administratorPassword)) ? true : false;

    boolean matchesRootPassword = CmsPropertyHandler.getMatchesAdministratorPassword(password);
    boolean isAdministrator = (userName.equalsIgnoreCase(administratorUserName) && matchesRootPassword) ? true
            : false;

    if (CmsPropertyHandler.getUsePasswordEncryption()) {
        try {
            byte[] encryptedPassRaw = DigestUtils.sha(password);
            String encryptedPass = new String(Base64.encodeBase64(encryptedPassRaw), "ASCII");
            password = encryptedPass;
        } catch (Exception e) {
            logger.error("Error encrypting password before auth:" + e.getMessage());
        }
    }

    if (this.transactionObject != null) {
        if (isAdministrator || SystemUserController.getController().getSystemUserVO(this.transactionObject,
                userName, password) != null)
            isAuthenticated = true;
    } else {
        if (isAdministrator || SystemUserController.getController().getSystemUserVO(userName, password) != null)
            isAuthenticated = true;
    }

    return isAuthenticated;
}

From source file:org.infoglue.cms.util.CmsPropertyHandler.java

public static boolean getMatchesAdministratorPassword(String password) {
    try {//  w  w  w  . jav a 2  s.c  om
        if (CmsPropertyHandler.getUsePasswordEncryption()) {
            byte[] encryptedPassRaw = DigestUtils.sha(password);
            String encryptedPass = new String(Base64.encodeBase64(encryptedPassRaw), "ASCII");
            password = encryptedPass;
        }

        String administratorPassword = getProperty("administratorPassword");
        if (administratorPassword != null)
            return administratorPassword.equals(password);
        else
            return false;
    } catch (Exception e) {
        logger.error("There was an error when we encrypted the password:" + e.getMessage(), e);
        return false;
    }
}

From source file:org.kie.workbench.common.screens.datamodeller.backend.server.DataModelerServiceHelper.java

public String calculateFingerPrint(String str) {
    return Base64.encodeBase64String(DigestUtils.sha(str));
}

From source file:org.kie.workbench.common.screens.datamodeller.backend.server.DataModelerServiceHelper.java

public String calculateFingerPrint(Object obj) throws Exception {
    ByteArrayOutputStream byteArrayOutputStream = new ByteArrayOutputStream();
    ObjectOutputStream objectOutputStream = new ObjectOutputStream(byteArrayOutputStream);
    objectOutputStream.writeObject(obj);
    objectOutputStream.close();/*w w w .ja  v a 2  s .c  o  m*/
    byte[] fingerPrint = DigestUtils.sha(byteArrayOutputStream.toByteArray());
    return Base64.encodeBase64String(fingerPrint);
}

From source file:org.nuxeo.opensocial.shindig.oauth.NuxeoOAuthRequest.java

/**
 * Start with an HttpRequest. Throw if there are any attacks in the query.
 * Throw if there are any attacks in the post body. Build up OAuth parameter
 * list. Sign it. Add OAuth parameters to new request. Send it.
 *///  w w  w  .j  a v a2 s  .c om
@Override
public HttpRequest sanitizeAndSign(HttpRequest base, List<Parameter> params, boolean tokenEndpoint)
        throws OAuthResponseParams.OAuthRequestException {
    if (params == null) {
        params = Lists.newArrayList();
    }
    UriBuilder target = new UriBuilder(base.getUri());
    String query = target.getQuery();
    target.setQuery(null);
    params.addAll(sanitize(OAuth.decodeForm(query)));

    switch (OAuthUtil.getSignatureType(tokenEndpoint, base.getHeader("Content-Type"))) {
    case URL_ONLY:
        break;
    case URL_AND_FORM_PARAMS:
        params.addAll(sanitize(OAuth.decodeForm(base.getPostBodyAsString())));
        break;
    case URL_AND_BODY_HASH:
        try {
            byte[] body = IOUtils.toByteArray(base.getPostBody());
            byte[] hash = DigestUtils.sha(body);
            String b64 = new String(Base64.encodeBase64(hash), CharsetUtil.UTF8.name());
            params.add(new Parameter(OAuthConstants.OAUTH_BODY_HASH, b64));
        } catch (IOException e) {
            throw responseParams.oauthRequestException(OAuthError.UNKNOWN_PROBLEM, "Error taking body hash", e);
        }
        break;
    }

    addIdentityParams(params);

    addSignatureParams(params);

    try {
        OAuthMessage signed = OAuthUtil.newRequestMessage(accessorInfo.getAccessor(), base.getMethod(),
                target.toString(), params);
        HttpRequest oauthHttpRequest = createHttpRequest(base, selectOAuthParams(signed));
        // Following 302s on OAuth responses is unlikely to be productive.
        oauthHttpRequest.setFollowRedirects(false);
        return oauthHttpRequest;
    } catch (OAuthException e) {
        throw responseParams.oauthRequestException(OAuthError.UNKNOWN_PROBLEM, "Error signing message", e);
    }
}

From source file:org.saadahmed.snowcrystal.SnowCrystal.java

public static String sha1Base64UrlSafe() {
    return Base64.encodeBase64URLSafeString(DigestUtils.sha(SnowCrystal.newId().unwrap()));
}