|
@@ -41,9 +41,10 @@ import org.springframework.security.crypto.keygen.KeyGenerators;
|
|
|
* @author Keith Donald
|
|
|
* @author Luke Taylor
|
|
|
* @deprecated Digest based password encoding is not considered secure. Instead use an
|
|
|
- * adaptive one way funciton like BCryptPasswordEncoder, Pbkdf2PasswordEncoder, or
|
|
|
+ * adaptive one way function like BCryptPasswordEncoder, Pbkdf2PasswordEncoder, or
|
|
|
* SCryptPasswordEncoder. Even better use {@link DelegatingPasswordEncoder} which supports
|
|
|
- * password upgrades.
|
|
|
+ * password upgrades. There are no plans to remove this support. It is deprecated to indicate
|
|
|
+ * that this is a legacy implementation and using it is considered insecure.
|
|
|
*/
|
|
|
@Deprecated
|
|
|
public final class StandardPasswordEncoder implements PasswordEncoder {
|