Package org.broadleafcommerce.common.encryption

Class PassthroughEncryptionModule

java.lang.Object

org.broadleafcommerce.common.encryption.PassthroughEncryptionModule

All Implemented Interfaces:

EncryptionModule

public class PassthroughEncryptionModule
extends Object
implements EncryptionModule

The default encryption module simply passes through the decrypt and encrypt text. A real implementation should adhere to PCI compliance, which requires robust key management, including regular key rotation. An excellent solution would be a module for interacting with the StrongKey solution. Refer to this discussion:

http://www.strongauth.com/forum/index.php?topic=44.0

Author:

jfischer

Field Summary

Fields

Modifier and Type	Field	Description
protected org.springframework.core.env.Environment	env

Constructor Summary

Constructors

Constructor	Description
PassthroughEncryptionModule()

Method Summary

Modifier and Type	Method	Description
String	decrypt(String cipherText)	Decrypt a encrypted string
String	encrypt(String plainText)	Encrypt a text string
void	init()
Boolean	matches(String raw, String encrypted)	Check to see if a text string matches a generated encrypted token.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

env

@Autowired
protected org.springframework.core.env.Environment env

Constructor Details

PassthroughEncryptionModule

public PassthroughEncryptionModule()

Method Details

init

@PostConstruct
public void init()

decrypt

public String decrypt(String cipherText)

Description copied from interface: EncryptionModule

Decrypt a encrypted string

Specified by:

decrypt in interface EncryptionModule

Returns:

encrypt

public String encrypt(String plainText)

Description copied from interface: EncryptionModule

Encrypt a text string

Specified by:

encrypt in interface EncryptionModule

Returns:

matches

public Boolean matches(String raw,
 String encrypted)

Description copied from interface: EncryptionModule

Check to see if a text string matches a generated encrypted token. This is useful for encoders that always generate a unique hash.

Specified by:

matches in interface EncryptionModule

Returns: