Results 1 to 2 of 2

Thread: spring security with HMAC?

  1. Jan 10th, 2012, 03:42 AM #1
    albert_kam
    albert_kam is offline Member
    Join Date
    Feb 2011
    Posts
    33

    Question spring security with HMAC?

    HMAC seems to be the ideal security for a stateless webapp, storing nothing in server sessions.

    But is it possible to integrate HMAC auth with Spring Security auth ?

    I am currently using Spring Security 3.1.0
    Reply With Quote Reply With Quote
  2. Jan 10th, 2012, 10:54 AM #2
    Rob Winch
    Rob Winch is offline Senior Member Spring Team
    Join Date
    Jan 2008
    Posts
    1,826

    Default

    Spring security does not provide this out of the box, but you can customize it to meet your needs. Keep in mind that things like this are not as clear cut as they appear. In short, would not recommend inventing your own protocol as this is a pretty sure way to have a security hole.
    Rob Winch - @rob_winch
    Spring Security Lead
    Pivotal
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules