DaoAuthenticationProvider uses DelegatingPasswordEncoder
This means that passwords will be encoded with BCrypt by default Fixes: gh-2775
This commit is contained in:
@@ -18,6 +18,7 @@ package org.springframework.security.samples.config;
|
||||
import org.springframework.beans.factory.annotation.Autowired;
|
||||
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
|
||||
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
||||
import org.springframework.security.core.userdetails.User;
|
||||
|
||||
@EnableWebSecurity
|
||||
public class SecurityConfig {
|
||||
@@ -28,7 +29,7 @@ public class SecurityConfig {
|
||||
AuthenticationManagerBuilder auth) throws Exception {
|
||||
auth
|
||||
.inMemoryAuthentication()
|
||||
.withUser("user").password("password").roles("USER");
|
||||
.withUser(User.withDefaultPasswordEncoder().username("user").password("password").roles("USER"));
|
||||
}
|
||||
// @formatter:on
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user