In the previous video, we have discussed in detail about what is encoding encryption and hashing and
hashing is a clear winner that we should follow for any password management in our application.
So this is a sample representation on hotspring security will be here if you try to use the hash like
the very first action that performed by the user as soon as he entered his credentials and clicked login,
you can convert the password.
One, two, three, four, five by using a hashing algorithm either on the other side or in the back
and say based upon your requirement.
So once that was null, password is hashed, it will be into some encrypted value, which looks like
this post that spring.
Security will try to pull the details from the database by using the user name of the user and retrieve
the already hash tag password of one, two, three, four, five.
And here you can see the hash value that we generated based upon the value provided by user.
And the hash that we maintain in the database today looks different.
But they are the hash values of the same text, which is one, two, three, four, five.
So in this scenario, the hash value, which is from the database and the hash that we calculate there
is equal.
So if it matches the Loganville, is that always the login will face?
But you may ask how spring security will know what is a hashing mechanism that I have to use, what
kind of hash that sprint security follows?
And where does this match will happen?
And where does this conversion of hashing will happen based upon the value received from the UI, from
the postman.
So for all such questions, password and quarter is the answer.
So like we're discussing in the architecture of spring security, user details and Password and Corde
are fully responsible for validating the credentials.
So password and the retail spring security.
OK, my password has been hashed are encrypted using this mechanism.
You have to follow the same mechanism while matching the passwords and accordingly try to do the identification.
So let's try to look in detail about password and for that in the next video, you have any questions?
Please post in queue and I'll get you in the next week.
Thank you.
By.