Coverage Report - org.apache.shiro.authc.credential.Sha1CredentialsMatcher
 
Classes in this File Line Coverage Branch Coverage Complexity
Sha1CredentialsMatcher
100%
3/3
N/A
1
 
 1  
 /*
 2  
  * Licensed to the Apache Software Foundation (ASF) under one
 3  
  * or more contributor license agreements.  See the NOTICE file
 4  
  * distributed with this work for additional information
 5  
  * regarding copyright ownership.  The ASF licenses this file
 6  
  * to you under the Apache License, Version 2.0 (the
 7  
  * "License"); you may not use this file except in compliance
 8  
  * with the License.  You may obtain a copy of the License at
 9  
  *
 10  
  *     http://www.apache.org/licenses/LICENSE-2.0
 11  
  *
 12  
  * Unless required by applicable law or agreed to in writing,
 13  
  * software distributed under the License is distributed on an
 14  
  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 15  
  * KIND, either express or implied.  See the License for the
 16  
  * specific language governing permissions and limitations
 17  
  * under the License.
 18  
  */
 19  
 package org.apache.shiro.authc.credential;
 20  
 
 21  
 import org.apache.shiro.crypto.hash.AbstractHash;
 22  
 import org.apache.shiro.crypto.hash.Hash;
 23  
 import org.apache.shiro.crypto.hash.Sha1Hash;
 24  
 
 25  
 
 26  
 /**
 27  
  * {@code HashedCredentialsMatcher} implementation that expects the stored {@code AuthenticationInfo} credentials to be
 28  
  * SHA hashed.
 29  
  * <p/>
 30  
  * <b>Note:</b> <a href="http://en.wikipedia.org/wiki/MD5">MD5</a> and
 31  
  * <a href="http://en.wikipedia.org/wiki/SHA_hash_functions">SHA-1</a> algorithms are now known to be vulnerable to
 32  
  * compromise and/or collisions (read the linked pages for more).  While most applications are ok with either of these
 33  
  * two, if your application mandates high security, use the SHA-256 (or higher) hashing algorithms and their
 34  
  * supporting <code>CredentialsMatcher</code> implementations.</p>
 35  
  *
 36  
  * @since 0.9
 37  
  * @deprecated since 1.1 - use the HashedCredentialsMatcher directly and set its
 38  
  *             {@link HashedCredentialsMatcher#setHashAlgorithmName(String) hashAlgorithmName} property.
 39  
  */
 40  
 public class Sha1CredentialsMatcher extends HashedCredentialsMatcher {
 41  
 
 42  
     public Sha1CredentialsMatcher() {
 43  1
         super();
 44  1
         setHashAlgorithmName(Sha1Hash.ALGORITHM_NAME);
 45  1
     }
 46  
 }