Planned lessonJNR-037-L03

PasswordEncoder and upgrades

On This Lesson 4 topics

This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.

In this lesson

store and check passwords with Spring's PasswordEncoder.

PasswordEncoder has encode(raw) and matches(raw, stored).
Use BCryptPasswordEncoder or Argon2PasswordEncoder.
PasswordEncoderFactories.createDelegatingPasswordEncoder() stores an id prefix like {bcrypt}, so you can change algorithms later.
upgradeEncoding tells you when a stored hash is weaker than the current setting; re-hash on the next successful login.
Expose the encoder as a @Bean; Spring Security picks it up.

Draft outline details

java

@Bean
PasswordEncoder passwordEncoder() {
    return PasswordEncoderFactories.createDelegatingPasswordEncoder();
}

What does the {bcrypt} prefix make possible?

Show answer

Moving to a new algorithm later while old hashes still work.

Apply this lesson with the module's lab, exercises and quiz.

Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.