authenticator action..password hashing

[dheerajsega]

I was trying to compare the hashed password stored in my database with the password the end user types by hashing the user entered password.
I am posting the code that i used in authenticator action java file.
I am able deploy the application but cannot login.
//
public class AuthenticatorAction implements Authenticator
{
@PersistenceContext EntityManager em;

@Out(required=false, scope = SESSION)
private User user;


public boolean authenticate()
{

List results = em.createQuery("select u from User u where u.username=#{identity.username} and u.passwordhash=this.calculatehash(#{identity.password})")
.getResultList();

if ( results.size()==0 )
{
return false;
}
else
{
user = (User) results.get(0);
return true;
}
}

private String calculatehash(String loginpassword)
{

String newhash = Util.createPasswordHash("MD5", Util.BASE16_ENCODING, null, null, loginpassword);
return newhash;
}
..the error i get after deploying it is
.. it returns that it cannot find the function named calculatepasswordhash...

Can anyone tell me why is it not calculating hash?

[tptackab]

I'm running up against the same issue. My passwords are stored SHA hashed in the database, and so I need to hash the clear text password to compare it with the hashed password fetched from the db. When I attempt to hash #{identity.username}, it simply hashes the String "#{identity.username}".

How does one get the evaluated EL value from #{identity.username} so it can be hashed before placing it into a query parameter? Is there another way to compare the hashed values?

Thanks in advance,
Tom

[tptackab]

Got it!

String password = Identity.instance().getPassword();

;-)

[dheerajsega]

Thanks it works..