根据这个答案,我应该保存字符串bcrypt哈希密码, passHash
,作为 BINARY
或者 BINARY(60)
(我选择了 BINARY(60)
)在mysql表中存储时(我将它存储在名为 passHash
).
现在当我选择并检索 passHash
列值从我的表转换成java,现在是一个 byte[]
数据类型。
然后如何将其转换回字符串形式,以便使用 validateLogin()
方法如下:
//Validate username and password login
public boolean validateLogin(String username, String userpass)
{
boolean status = false;
PreparedStatement pst = null;
ResultSet rs = null;
User user = new User(); //This is my Java bean class
try(Connection connect= DBConnection.getConnection())
{
//Here, passHash is stored as VARBINARY(60)
pst = connect.prepareStatement("SELECT * FROM user WHERE username=? and passHash=?;");
pst.setString(1, username);
pst.setString(2, userpass);
//Here's where I'm having difficulty because `passHash` column in my user table is VARBINARY(60) while `userpass` is a String
rs = pst.executeQuery();
status = rs.next();
}
catch (SQLException e)
{
e.printStackTrace();
}
return status; //status will return `true` if `username` and `userpass` matches what's in the columns
}
参数 username
以及 userpass
用于在我的 Login.jsp
形式:
String username = request.getParameter("username");
String userpass = request.getParameter("userpass");
编辑:我的bcrypt代码如下:
//returns a hashed String value
public static String bCrypt (String passPlain) {
return BCrypt.hashpw(passPlain, BCrypt.gensalt(10));
}
//Returns a true if plain password is a match with hashed password
public static Boolean isMatch(String passPlain, String passHash){
return (BCrypt.checkpw(passPlain, passHash));
}
1条答案
按热度按时间3z6pesqy1#
创建用户帐户时,必须以某种方式对密码进行哈希运算,以生成
byte[]
在java中,然后将其插入到user
table。检查现有密码的模式是传入纯文本密码和散列。