Decode the Bcrypt encoded password in Spring Security to deactivate user account

bcrypt jbcrypt
arch picture arch · Nov 13, 2014 · Viewed 47.9k times · Source

I am working on web application project in Spring Hibernate MVC. I am storing encoded passwords in a database using Bcrypt algorithm in Spring security.

Now I want to get that encoded password to be decoded to deactivate a use account where in I am giving user email and password to verify before user deactivate the account. I have a problem in getting the decoded password.

Can anyone help me to get out of it or any alternate solution for my requirement?

Answer

arch picture arch · Nov 13, 2014

The problem is solved by using below code: 

BCryptPasswordEncoder encoder = new BCryptPasswordEncoder();  
encoder.matches(password, user.getPassword());

password - from form(JSP)
user.getPassword() - from database

BCryptPasswordEncoder encoder = new BCryptPasswordEncoder();
if(email.equalsIgnoreCase(user.getEmail()) && encoder.matches(password, user.getPassword())) {
    userService.deactivateUserByID(user.getId());
    redirectAttributes.addFlashAttribute("successmsg", "Your account has been deactivated successfully.");
    model.setViewName("redirect:/logout");
}else{
    redirectAttributes.addFlashAttribute("errormsg", "Email or Password is incorrect");
    model.setViewName("redirect:/app/profile/deactivate");
}

Related questions

BCrypt.checkpw() Invalid salt version exception

I'm trying to implement authentication using BCrypt, in my Play 2.1. Java application, but I'm getting Invalid salt version exception when I'm trying to authenticate the user. This is my stack trace play.api.Application$$anon$1: Execution exception[[IllegalArgumentException: Invalid salt …

Read More
Using jBCrypt to salt passwords in Android App causes a long hang

I am using the jBCrypt Library to hash user passwords when they register using my app. I am using the basic hash function, with a salt, like so: String pass = BCrypt.hashpw(rawPass, BCrypt.gensalt()); I noticed a one to …

Read More
How to use jBCrypt for password hash comparison?

I am having trouble getting a plaintext password and a previous hash to match using BCrypt's checkpw(plaintextpw, previoushash) method. In a register servlet I take the entered password, hash it using BCrypt's hashpw(password, genSalt) method and store it …

Read More