Question

I am developping an application with Spring roo.
As a first authentication test implying Spring security I used authentication against a table in my database. That work fine :

    <authentication-manager alias="authenticationManager">
        <authentication-provider>
            <jdbc-user-service data-source-ref="dataSource" authorities-by-username-query="select username,authority from users where username=?"/>
        </authentication-provider>
    </authentication-manager>

Now things get a little more challenging (for me) because the password in the “real” (in the production env) user table is encrypted, I have to first use the hash function md5 and then the base64 encoding as well as iso to deal with special characters.

I have to create a custom jdbc-user-service. What would be the best practices to deal with those operations ?

Answer 1

As suggested, I managed to solve the problem with Spring security build in authentification.

I had first to set the encoding of the security-context.xml to ISO-8859-1

<?xml version="1.0" encoding="ISO-8859-1"?>

then use :

<password-encoder hash="md5" base64="true" ></password-encoder>