error: Encoded password does not look like BCrypt (Spring Security) - spring

Question

Good afternoon fellow developers I have a problem using BCrypt the error that occurs is that when I type username and password in postman the message below appears
Encoded password does not look like BCrypt
File using BCrypt
#EnableWebSecurity
public class WebSecurityConfigAdapter extends WebSecurityConfigurerAdapter{
#Bean
protected AuthenticationManager customAuthenticationManager() throws Exception {
// TODO Auto-generated method stub
return super.authenticationManagerBean();
}
#Autowired
public void configAuthentication(AuthenticationManagerBuilder auth) throws Exception {
DriverManagerDataSource dataSource = new DriverManagerDataSource();
dataSource.setUsername("user");
dataSource.setPassword("123");
dataSource.setUrl("jdbc:postgresql://localhost:5432/test");
dataSource.setDriverClassName("org.postgresql.Driver");
auth.jdbcAuthentication().dataSource(dataSource)
.usersByUsernameQuery("select login, password, active_account from login where active_account=true and login=?")
.authoritiesByUsernameQuery("select username, authority from oauth_authorities where username=?")
.passwordEncoder(this.passwordEncoder());
}
//#Bean
//public PasswordEncoder passwordEncoder() {
// return NoOpPasswordEncoder.getInstance();
//}
#Bean
public BCryptPasswordEncoder passwordEncoder() {
return new BCryptPasswordEncoder();
}
#Override
public void configure(HttpSecurity http) throws Exception {
http.cors();
http.csrf().disable();
http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);
}
}
In the database the table has the following configuration
CREATE TABLE login
(
login character varying(100) COLLATE pg_catalog."default" NOT NULL,
senha character varying(100) COLLATE pg_catalog."default" NOT NULL,
active_account boolean,
CONSTRAINT login_pkey PRIMARY KEY (login)
)
CREATE TABLE oauth_authorities
(
username character varying(50) COLLATE pg_catalog."default" NOT NULL,
authority character varying(50) COLLATE pg_catalog."default" NOT NULL,
CONSTRAINT "username+authority_PKey" PRIMARY KEY (username, authority)
)
Data logged for testing when BCrypt is configured
Table login
login -> test
password -> $2a$10$sFKmbxbG4ryhwPNx/l3pgOJSt.fW1z6YcUnuE2X8APA/Z3NI/oSpq
active_account -> true
Table oauth_authorities
username -> test
authority -> user
When the above code is executed it displays the error Encoded password does not look like BCrypt
if I remove the BCrypt on the password it works normally as the code shown below
#EnableWebSecurity
public class WebSecurityConfigAdapter extends WebSecurityConfigurerAdapter{
#Bean
protected AuthenticationManager customAuthenticationManager() throws Exception {
// TODO Auto-generated method stub
return super.authenticationManagerBean();
}
#Autowired
public void configAuthentication(AuthenticationManagerBuilder auth) throws Exception {
DriverManagerDataSource dataSource = new DriverManagerDataSource();
dataSource.setUsername("user");
dataSource.setPassword("123");
dataSource.setUrl("jdbc:postgresql://localhost:5432/test");
dataSource.setDriverClassName("org.postgresql.Driver");
auth.jdbcAuthentication().dataSource(dataSource)
.usersByUsernameQuery("select login, password, active_account from login where active_account=true and login=?")
.authoritiesByUsernameQuery("select username, authority from oauth_authorities where username=?")
.passwordEncoder(this.passwordEncoder());
}
#Bean
public PasswordEncoder passwordEncoder() {
return NoOpPasswordEncoder.getInstance();
}
#Override
public void configure(HttpSecurity http) throws Exception {
http.cors();
http.csrf().disable();
http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);
}
}
In the database the table has the following configuration
CREATE TABLE login
(
login character varying(100) COLLATE pg_catalog."default" NOT NULL,
senha character varying(100) COLLATE pg_catalog."default" NOT NULL,
active_account boolean,
CONSTRAINT login_pkey PRIMARY KEY (login)
)
CREATE TABLE oauth_authorities
(
username character varying(50) COLLATE pg_catalog."default" NOT NULL,
authority character varying(50) COLLATE pg_catalog."default" NOT NULL,
CONSTRAINT "username+authority_PKey" PRIMARY KEY (username, authority)
)
Data logged for testing when not configured BCrypt
Table login
login -> test
password -> $2a$10$sFKmbxbG4ryhwPNx/l3pgOJSt.fW1z6YcUnuE2X8APA/Z3NI/oSpq
active_account -> true
Table oauth_authorities
username -> test
authority -> user
My file pom.xml
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
<parent>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-parent</artifactId>
<version>2.5.3</version>
<relativePath/> <!-- lookup parent from repository -->
</parent>
<groupId>com.company</groupId>
<artifactId>backEnd</artifactId>
<version>0.0.1-SNAPSHOT</version>
<packaging>war</packaging>
<name>backEnd</name>
<description>Test</description>
<properties>
<java.version>16</java.version>
</properties>
<dependencies>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-tomcat</artifactId>
<scope>provided</scope>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-test</artifactId>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web-services</artifactId>
</dependency>
<!-- JPA -->
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-data-jpa</artifactId>
</dependency>
<!-- Postgresql -->
<dependency>
<groupId>org.postgresql</groupId>
<artifactId>postgresql</artifactId>
<scope>runtime</scope>
</dependency>
<!-- Oauth2 -->
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.security.oauth.boot</groupId>
<artifactId>spring-security-oauth2-autoconfigure</artifactId>
<version>2.4.0</version>
</dependency>
<dependency>
<groupId>org.springframework.security.oauth</groupId>
<artifactId>spring-security-oauth2</artifactId>
<version>2.3.8.RELEASE</version>
</dependency>
<!-- JWT -->
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-jwt</artifactId>
<version>1.1.1.RELEASE</version>
</dependency>
</dependencies>
<build>
<plugins>
<plugin>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-maven-plugin</artifactId>
</plugin>
</plugins>
</build>
<repositories>
<repository>
<id>spring-milestones</id>
<name>Spring Milestones</name>
<url>https://repo.spring.io/milestone</url>
<snapshots>
<enabled>false</enabled>
</snapshots>
</repository>
<repository>
<id>spring-snapshots</id>
<name>Spring Snapshots</name>
<url>https://repo.spring.io/snapshot</url>
<releases>
<enabled>false</enabled>
</releases>
</repository>
</repositories>
<pluginRepositories>
<pluginRepository>
<id>spring-milestones</id>
<name>Spring Milestones</name>
<url>https://repo.spring.io/milestone</url>
<snapshots>
<enabled>false</enabled>
</snapshots>
</pluginRepository>
<pluginRepository>
<id>spring-snapshots</id>
<name>Spring Snapshots</name>
<url>https://repo.spring.io/snapshot</url>
<releases>
<enabled>false</enabled>
</releases>
</pluginRepository>
</pluginRepositories>
</project>
Where am I wrong if a colleague can help
Thanks

Answer 1

I am finding the configAuthentication method weird since it is not part of the class WebSecurityConfigurerAdapter and is not called anywhere in your code (to my knowledge).
I would suggest you using the following one instead:
#Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
DriverManagerDataSource dataSource = new DriverManagerDataSource();
dataSource.setUsername("user");
dataSource.setPassword("123");
dataSource.setUrl("jdbc:postgresql://localhost:5432/test");
dataSource.setDriverClassName("org.postgresql.Driver");
auth.jdbcAuthentication().dataSource(dataSource)
.usersByUsernameQuery("select login, password, active_account from login where active_account=true and login=?")
.authoritiesByUsernameQuery("select username, authority from oauth_authorities where username=?")
.passwordEncoder(this.passwordEncoder());
}