From the course: Extending, Securing, and Dockerizing Spring Boot Microservices

Unlock the full course today

Join today to access over 23,300 courses taught by industry experts.

Password encryption

Password encryption

From the course: Extending, Securing, and Dockerizing Spring Boot Microservices

Start my 1-month free trial Buy for my team

Password encryption

“

- [Instructor] In the last video, we saw how a user could provide their username and password to be authenticated with the authentication manager and a user detail service. But how was that password verified? The password let me in was not stored in the database. Instead, there was a long nonsensical string in data.sql. That long string is actually a hashed value created by the Spring BCrypt algorithm. The authentication manager requires a password encoder bean in order to encode the plain text password and then compares it to the previously encoded value in the database. I'm repeating a pattern from the Spring Security course by initializing it to 12. Now, how about creating a new user and encode the password? There's a new method in UserService that does just that. In this sign up method, it creates a new user with the CSR role as long as the username does not already exist. Now, let's run this method from an integration test. So, I have a UserServiceIntegrationTest and we will run…

Contents