org.sterl.hash:hash-root

Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/

License	The Apache Software License, Version 2.0
GroupId	org.sterl.hash
ArtifactId	hash-root
Last Version	0.1.0
Release Date	Oct 26, 2020
Type	pom
Description	Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/
Source Code Management	https://github.com/sterlp/hash

Download hash-root

Filename	Size
hash-root-0.1.0.pom	5 KB

How to add to project

Apache Maven

<!-- https://jarcasting.com/artifacts/org.sterl.hash/hash-root/ -->
<dependency>
    <groupId>org.sterl.hash</groupId>
    <artifactId>hash-root</artifactId>
    <version>0.1.0</version>
    <type>pom</type>
</dependency>

Gradle Groovy

// https://jarcasting.com/artifacts/org.sterl.hash/hash-root/
implementation 'org.sterl.hash:hash-root:0.1.0'

Gradle Kotlin

// https://jarcasting.com/artifacts/org.sterl.hash/hash-root/
implementation ("org.sterl.hash:hash-root:0.1.0")

Apache Buildr

'org.sterl.hash:hash-root:pom:0.1.0'

Apache Ivy

<dependency org="org.sterl.hash" name="hash-root" rev="0.1.0">
  <artifact name="hash-root" type="pom" />
</dependency>

Groovy Grape

@Grapes(
@Grab(group='org.sterl.hash', module='hash-root', version='0.1.0')
)

Scala SBT

libraryDependencies += "org.sterl.hash" % "hash-root" % "0.1.0"

Leiningen

[org.sterl.hash/hash-root "0.1.0"]

Dependencies

There are no dependencies for this project. It is a standalone project that does not depend on any other jars.

Project Modules

• hash-lib
• jee-hash-lib
• spring-hash-lib

Hash Lib Cli

Tool to create BCrypt and PBKDF2 hashes of passwords directly in the command line:

Download latest version of hash-cli here: https://github.com/sterlp/hash/releases

Create a BCrpyt password hash

java -jar hash-cli.jar mypassword
> $2a$10$m4hjjVjjGD36bgHlblJaweMDrGelSO1lx4osfpNi/7DN9ZvTzMqA6

Create a Hash with a specific algorithm

java -jar hash-cli.jar -a PBKDF2WithHmacSHA512 -p mypassword
> PBKDF2WithHmacSHA512:2048:ilIYz4CirlKeZfa59Tu9Dlruc69zaAxGyDb0OOcpppM=:HMv6yD8WUKSM2XY6jHIuzz9ShXX1wj120Njb0TptJ6hBBWAFnOdx0xR1hvz9ICtp91sdBxRaMyU8LsYZCIuP9g==

Verify a password hash

java -jar hash-cli.jar -a PBKDF2WithHmacSHA512 -p mypassword -h PBKDF2WithHmacSHA512:2048:ilIYz4CirlKeZfa59Tu9Dlruc69zaAxGyDb0OOcpppM=:HMv6yD8WUKSM2XY6jHIuzz9ShXX1wj120Njb0TptJ6hBBWAFnOdx0xR1hvz9ICtp91sdBxRaMyU8LsYZCIuP9g==
> true

hash-lib

Common lib which provides a common Hash algorithms for JEE and Spring Boot:

• BCrypt
• PBKDF2WithHmacSHA224
• PBKDF2WithHmacSHA256
• PBKDF2WithHmacSHA384
• PBKDF2WithHmacSHA512

jee-hash-lib

Support BCrypt and PBKDF2 password hash and verification. As so be compatible with existing JEE JDBC user stores and Spring Boot user stores.

Usage

import javax.annotation.security.DeclareRoles;
import javax.enterprise.context.ApplicationScoped;
import javax.security.enterprise.authentication.mechanism.http.BasicAuthenticationMechanismDefinition;
import javax.security.enterprise.identitystore.DatabaseIdentityStoreDefinition;
import javax.ws.rs.ApplicationPath;
import javax.ws.rs.core.Application;
import org.sterl.jee.hash.BCryptAndPbkdf2PasswordHash;

@ApplicationScoped
@BasicAuthenticationMechanismDefinition(realmName = "jee-basic")
@DeclareRoles({ "admin", "user" }) // this authorities are allowed
@DatabaseIdentityStoreDefinition(
    callerQuery = "select password from users where enabled = true AND username = ?",
    groupsQuery = "select authority from authorities where username = ?",
    dataSourceLookup = "jdbc/identity-store",
    hashAlgorithm = BCryptAndPbkdf2PasswordHash.class,
    hashAlgorithmParameters = {
        "Algorithm=PBKDF2WithHmacSHA512"
    }
)
@ApplicationPath("")
public class ApplicationConfiguration extends Application {
    
}

Maven import JEE

<dependency>
  <groupId>org.sterl.hash</groupId>
  <artifactId>jee-hash-lib</artifactId>
  <version>0.1.0</version>
</dependency>

Base Lib

<dependency>
  <groupId>org.sterl.hash</groupId>
  <artifactId>hash-lib</artifactId>
  <version>0.1.0</version>
</dependency>

• Release: https://oss.sonatype.org/content/repositories/releases/org/sterl/hash/
• Snapshot: https://oss.sonatype.org/content/repositories/snapshots/org/sterl/hash/

How to release

• mvn versions:set -DnewVersion=x.x.x-SNAPSHOT
• mvn clean install -Prelease
• mvn deploy

Versions

Version
0.1.0 Oct 26, 2020