如何使用jBCrypt比较来自2个servlet的散列密码

Question

我在上遇到了问题，如何和在哪里比较我在注册servlet上散列的密码和我在登录上散列的密码。servlet。

希望你们能帮我。谢谢。登录servlet：

String password = request.getParameter("pword");
String haspw = BCrypt.hashpw(password, salt);

/* if username and password match*/
UserIO io = new UserIO();

authenticate = io.LogAccount(username, haspw);
if (authenticate == true) {
    uri = "Homepage.jsp";
    session.setAttribute("active", username);
} else {
    uri = "/WEB-INF/jsp/error.jsp";
}
RequestDispatcher rd = request.getRequestDispatcher(uri);
rd.forward(request, response);
out.close();

UserIO

if (registered_name.isEmpty() ||registered_pass.isEmpty()) { //registered_name.equals(username) && registered_pass.equals(password)
    //uri = "Homepage.jsp";
    hasInfo = false;
} else if (registered_name.equals(username) && registered_pass.equals(password)) {
hasInfo = true;
}

寄存器Servlet

String pword = request.getParameter("pword");
    String hashed = BCrypt.hashpw(pword, salt);

Answer 1

使用方法checkpw

BCrypt.checkpw(pword, salt);

这将返回一个比较布尔值。