How deeply does Spring Security in Action, Second Edition cover DelegatingPasswordEncoder?

Explains prefix-based delegation, encoder maps, and default selection, stopping short of encoder algorithm internals.

DelegatingPasswordEncoder

As explained in Spring Security in Action, Second Edition

DelegatingPasswordEncoder is a Spring Security PasswordEncoder implementation that selects another password encoder according to an identifier in the stored password representation.

DelegatingPasswordEncoder supports applications that must retain existing password hashes while adopting a different algorithm for newly registered users. It implements PasswordEncoder but delegates encoding and matching to another encoder selected from an identifier embedded in the stored representation. section 4.1.4

Its routing model is explicit:

Store a prefix such as {noop}, {bcrypt}, or {scrypt} before the encoded password. section 4.1.4
Map each identifier to a PasswordEncoder implementation. section 4.1.4

Spring configuration

Create a map containing NoOpPasswordEncoder, BCryptPasswordEncoder, and SCryptPasswordEncoder, then return new DelegatingPasswordEncoder("bcrypt", encoders). Spring also provides PasswordEncoderFactories.createDelegatingPasswordEncoder() for creating a delegating encoder.

How Spring Security in Action, Second Edition covers it

Cover of Spring Security in Action, Second Edition

liveBook manning.com

Read Spring Security in Action, Second Edition on liveBook Get the book at manning.com

Related concepts

BCryptPasswordEncoderuses · BCryptPasswordEncoder is a Spring Security PasswordEncoder implementation that hashes passwords using the bcrypt password-hashing function.
NoOpPasswordEncoderuses · NoOpPasswordEncoder is a Spring Security PasswordEncoder implementation that leaves passwords unencoded in cleartext.
PasswordEncoderkind of · PasswordEncoder is a Spring Security interface and strategy for encoding passwords and verifying supplied passwords against stored encoded representations.
SCryptPasswordEncoderuses · SCryptPasswordEncoder is a Spring Security PasswordEncoder implementation that encodes passwords with the scrypt password-hashing function.

This explainer was generated by Manning's knowledge graph from the text of Spring Security in Action, Second Edition. The section links point to the parts of the book it draws on.