Class SimpleLoginService


public final class SimpleLoginService extends LoginService
An implementation of LoginService that simply matches the username/password against a list of known users and their passwords. This is useful for demos or prototypes where a proper login server is not available. This Implementation is NOT secure. DO NOT USE this in a real application To make this implementation more secure, the passwords should be passed in and stored as the result of a one way hash algorithm. That way an attacker cannot simply read the password in memory to crack into the system.
Author:
rbair
  • Constructor Details

    • SimpleLoginService

      public SimpleLoginService(Map<String,char[]> passwordMap)
      Creates a new SimpleLoginService based on the given password map.
  • Method Details

    • authenticate

      public boolean authenticate(String name, char[] password, String server) throws Exception
      Attempts to authenticate the given username and password against the password map
      Specified by:
      authenticate in class LoginService
      Parameters:
      name - username
      password - password
      server - server (optional)
      Returns:
      true on authentication success
      Throws:
      Exception - TODO explain