spring-projects / spring-projects/spring-security
SEC-2406: Provide generic LDAP PasswordEncoder
Open
Nobody has claimed this yet.
in: ldap
type: enhancement
type: jira
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
Johannes Knauf (Migrated from SEC-2406) said:
It would be great, if a generic LDAP PasswordEncoder could be provided - maybe as kind of a wrapper around other LDAP Password encoding scheme implementations. I imagine the following behaviour:
- If a password entry exists in LDAP, automatically use the correct encoder - e.g. SHA for hash format prefix {SHA}.
- If no password entry exists - e.g. for a new user - use the default scheme.
The default scheme could be set via a constructor parameter or similar.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files or tests are named in the issue. Start by reviewing the existing LDAP PasswordEncoder implementations and how password entries expose their scheme; done means selecting an encoder from a prefix such as {SHA} and using the configured default when no password entry exists.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100