org.broadleafcommerce.common.encryption

Class PassthroughEncryptionModule

java.lang.Object

org.broadleafcommerce.common.encryption.PassthroughEncryptionModule

All Implemented Interfaces:

EncryptionModule

public class PassthroughEncryptionModule
extends Object
implements EncryptionModule

The default encryption module simply passes through the decrypt and encrypt text. A real implementation should adhere to PCI compliance, which requires robust key management, including regular key rotation. An excellent solution would be a module for interacting with the StrongKey solution. Refer to this discussion: http://www.strongauth.com/forum/index.php?topic=44.0

Author:

jfischer

Field Summary

Fields

Modifier and Type	Field and Description
protected org.springframework.core.env.Environment	env

Constructor Summary

Constructors

Constructor and Description
PassthroughEncryptionModule()

Method Summary

Modifier and Type	Method and Description
String	decrypt(String cipherText) Decrypt a encrypted string
String	encrypt(String plainText) Encrypt a text string
void	init()
Boolean	matches(String raw, String encrypted) Check to see if a text string matches a generated encrypted token.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

env

@Autowired
protected org.springframework.core.env.Environment env

Constructor Detail

PassthroughEncryptionModule

public PassthroughEncryptionModule()

Method Detail

init

@PostConstruct
public void init()

decrypt

public String decrypt(String cipherText)

Description copied from interface: EncryptionModule

Decrypt a encrypted string

Specified by:

decrypt in interface EncryptionModule

Returns:

encrypt

public String encrypt(String plainText)

Description copied from interface: EncryptionModule

Encrypt a text string

Specified by:

encrypt in interface EncryptionModule

Returns:

matches

public Boolean matches(String raw,
                       String encrypted)

Description copied from interface: EncryptionModule

Check to see if a text string matches a generated encrypted token. This is useful for encoders that always generate a unique hash.

Specified by:

matches in interface EncryptionModule

Returns: