Password Encryption in Play

10 years ago

Reading Time: < 1 minute

Today,in this blog I would like to tell you about Password encryption in Play.
As you know that saving password in its plain form can lead to future problems, so its better to use an encryption technique before saving them to your database.I will be using ‘SHA-256’ encyption in the code given below.
In your project inside the util package, create a scala object named: “EncyptionUtility”. Delete the content and add the following code:


package utils

import java.security.MessageDigest
import org.apache.commons.lang3.RandomStringUtils
import play.api.Logger
import play.api.libs.Crypto

object PasswordHashing {

/**
* Generate Random Alphanumeric String of Length 10 For Password
*/
def generateRandomPassword: String = {
val stringLength = 10
RandomStringUtils.randomAlphanumeric(stringLength)
}

/**
* Password Hashing Using Message Digest Algo
*/
def encryptPassword(password: String): String = {
val algorithm: MessageDigest = MessageDigest.getInstance("SHA-256")
val defaultBytes: Array[Byte] = password.getBytes
algorithm.reset
algorithm.update(defaultBytes)
val messageDigest: Array[Byte] = algorithm.digest
getHexString(messageDigest)
}

/**
* Generate HexString For Password & userId Encryption
*/
def getHexString(messageDigest: Array[Byte]): String = {
val hexString: StringBuffer = new StringBuffer
messageDigest foreach { digest =>
val hex = Integer.toHexString(0xFF & digest)
if (hex.length == 1) hexString.append('0') else hexString.append(hex)
}
Logger.info("encrypt Data" + hexString.toString)
hexString.toString
}

def encryptUserId(userId: String): String = {
Crypto.encryptAES(userId)
}

def decryptUserId(userId: String): String = {
Crypto.decryptAES(userId)
}

}

After adding this code, you just have to add the path name wherever you are using password.

Share the Knol: