Spring security or BCrypt algorithm which one is good for accounts like project?
- by Ranjith Kumar Nethaji
I am using spring security for hashing my password.And is it safe ,because am using spring security for first time.
my code here
<security:http auto-config="true">
<security:intercept-url pattern="/welcome*" access="ROLE_USER" />
<security:form-login login-page="/login" default-target-url="/welcome"
authentication-failure-url="/loginfailed" />
<security:logout logout-success-url="/logout" />
</security:http>
authentication-failure-url="/loginfailed" />
<security:logout logout-success-url="/logout" />
</security:http>
<authentication-manager>
<authentication-provider>
<password-encoder hash="sha" />
<user-service>
<user name="k" password="7c4a8d09ca3762af61e59520943dc26494f8941b"
authorities="ROLE_USER" />
</user-service>
</authentication-provider>
</authentication-manager>
.And I havnt used bcrypt algorithm.what is your feedback for both?any recommendation?
