Skip to Content
0
Jul 30, 2016 at 06:29 PM

How does Hybris store the password exactly?

3192 Views

I implemented a new encoder according to the article as below. https://help.hybris.com/6.1.0/hcd/8c256c54866910149de4d53a72e973d4.html The new encoder is a java version for Django password storage like [algorithm]$[salt]$[iterations]$[hash], which is described as below. https://docs.djangoproject.com/ja/1.9/topics/auth/passwords/

The problem is that the password filed in users table are filled with some different string, but not the format like [algorithm]$[salt]$[iterations]$[hash], which I expect after implementing the PassordEncoder.encode(). By the way, I confirmed the return string of PassordEncoder.encode() is [algorithm]$[salt]$[iterations]$[hash].

My mission is to implement the Django password storage way in hybris, to make the migration of password smooth. What happened on the way from the return string of PassordEncoder.encode() to the DB table? Any idea or hint would be appreciated. Thanks in advance!