This is it; you just have to implement the SHA algorithm in the "encode()" method (in your class implementing the CAS PasswordEncoder interface)
For checking the Liferay database you use the QueryDatabaseAuthenticationHandler:
And the passwordEncoder:
And of course the database connection for the QueryDatabaseAuth....
Of course, change values for YOUR values (database name, user, pass, name of class above...)
Hope this helps!
Bernardo Riveira
UPDATED: liferay forum system is changing the code up there in unknown ways;
it will not work if just copied and pasted because it changes an array index into italic "[ i ]"
so to be safe I just added a file to the post; remember to change the package name to where you're going to have it
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.io.UnsupportedEncodingException;
import org.jasig.cas.authentication.handler.*;
public final class LiferayPasswordEncoder implements PasswordEncoder {
public String encode(final String password) {
MessageDigest digester = null;
try{
digester = MessageDigest.getInstance("SHA");
digester.update(password.getBytes("UTF-8"));
}
catch (NoSuchAlgorithmException nsae) {
System.out.println("LiferayPasswordEncoder - error algoritmo SHA no encontrado");
nsae.printStackTrace();
}
catch (UnsupportedEncodingException uee) {
System.out.println("LiferayPasswordEncoder - error codificando texto");
uee.printStackTrace();
}
byte[] bytes = digester.digest();
return encodeBase64(bytes);
}
private static char getChar(int sixbit) {
if (sixbit >= 0 && sixbit <= 25) {
return (char)(65 + sixbit);
}
if (sixbit >= 26 && sixbit <= 51) {
return (char)(97 + (sixbit - 26));
}
if (sixbit >= 52 && sixbit <= 61) {
return (char)(48 + (sixbit - 52));
}
if (sixbit == 62) {
return '+';
}
return sixbit != 63 ? '?' : '/';
}
private static String encodeBase64(byte raw[]) {
StringBuilder encoded = new StringBuilder();
for (int i = 0; i < raw.length; i += 3) {
encoded.append(encodeBlock(raw, i));
}
return encoded.toString();
}
private static char[] encodeBlock(byte raw[], int offset) {
int block = 0;
int slack = raw.length - offset - 1;
int end = slack < 2 ? slack : 2;
for (int i = 0; i <= end; i++) {
byte b = raw[offset + i];
int neuter = b >= 0 ? ((int) (b)) : b + 256;
block += neuter << 8 * (2 - i);
}
char base64[] = new char[4];
for (int i = 0; i < 4; i++) {
int sixbit = block >>> 6 * (3 - i) & 0x3f;
base64[ i ] = getChar(sixbit);
}
if (slack < 1) {
base64[2] = '=';
}
if (slack < 2) {
base64[3] = '=';
}
return base64;
}
}For checking the Liferay database you use the QueryDatabaseAuthenticationHandler:
<bean class="org.jasig.cas.adaptors.jdbc.QueryDatabaseAuthenticationHandler">
<property name="dataSource" ref="dataSource" />
<property name="sql" value="SELECT password_ FROM User_ WHERE screenName=?" />
<property name="passwordEncoder" ref="passwordEncoder" />
</bean>And the passwordEncoder:
<bean id="passwordEncoder" class="class.name.from.above.code.LiferayPasswordEncoder" />And of course the database connection for the QueryDatabaseAuth....
<bean id="dataSource" class="org.apache.commons.dbcp.BasicDataSource">
<property name="driverClassName">
<value>com.mysql.jdbc.Driver</value>
</property>
<property name="url">
<value>jdbc:mysql://your.database.server/liferay.database?useUnicode=true&characterEncoding=UTF-8&autoReconnect=true</value>
</property>
<property name="username"><value>your.liferay.db.username</value></property>
<property name="password"><value>your.liferay.db.password</value></property>
</bean>Of course, change values for YOUR values (database name, user, pass, name of class above...)
Hope this helps!
Bernardo Riveira
UPDATED: liferay forum system is changing the code up there in unknown ways;
it will not work if just copied and pasted because it changes an array index into italic "[ i ]" so to be safe I just added a file to the post; remember to change the package name to where you're going to have it
