带有哈希密码的Spring TokenBasedRememberMeServices

Question

I am using StandardPasswordEncoder which hashes the password using SHA-256 with 1024 iterations and 8-byte salt. I was looking at TokenBasedRememberMeServices for doing a similar thing or at least using it but there is a problem with the salt. According to the documentation, the token consists of the following:

username + ":" + expiryTime + ":" + Md5Hex(username + ":" + expiryTime + ":" + password + ":" + key)

But the problem is that the Md5Hex part will differ because of salt, and there is no way to separate it IMO. Does TokenBasedRememberMeServices work with salted passwords? If not, how would you recommend doing an alternative token? Is there any way to do it without using a persistent store?

Answer 1

在研究了此问题之后，事实证明，无法使用带有令牌的加盐密码，因此必须发送普通密码。