WebPasswordLoginModule and WebPasswordJDBCLoginModule provide enhanced support of authentication password encryption.

To achieve enhanced encryption support, the com.cosminexus.admin.auth.security.PasswordCryptography class must be inherited. The created class should be stored in the following directories as a class file.

• Windows:
  Cosminexus installation directory\manager\modules
  
• UNIX:
  /opt/Cosminexus/manager/modules
  

The directories can be changed by the com.cosminexus.admin.auth.custom.modules option in the integrated user management configuration file (ua.conf).

The following is an example of implementation in which the byte arrays are compared in the SHA-1 format.

package my;
 
import com.cosminexus.admin.auth.security.PasswordCryptography;
import java.security.*;
 
public class CustomCryptography implements PasswordCryptography
{
  public byte[] encrypt (byte[] plain) {
    byte[] encryptedPassword = null;
    try{
      MessageDigest md = MessageDigest.getInstance("SHA");
      md.update(plain);
      encryptedPassword = md.digest();
    } catch (NoSuchAlgorithmException e) {
      encryptedPassword = plain;
    }
    return encryptedPassword;
  }
}