Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
Co-authored-by: Michelle Purcell <[email protected]>
  • Loading branch information
MichalMaler and michelle-purcell authored Feb 20, 2023
1 parent c4d1448 commit 57f0b96
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions docs/src/main/asciidoc/security-jpa-concept.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ Quarkus security offers a JPA integration to collect usernames, passwords, and r
The following JPA entity specification demonstrates how users' information needs to be stored in a JPA entity and properly mapped so that Quarkus can retrieve this information from a database.


* The `@UserDefinition` annotation must be present on a JPA entity, no matter if link:https://quarkus.io/guides/hibernate-orm-panache[simplified Hibernate ORM with Panache] is used or not.
* The `@UserDefinition` annotation must be present on a JPA entity, regardless of whether link:https://quarkus.io/guides/hibernate-orm-panache[simplified Hibernate ORM with Panache] is used or not.

* The `@Username` and `@Password` field types are always `String`.

Expand Down Expand Up @@ -127,7 +127,7 @@ In cryptography, a salt is a name for random data used as an additional input to

For manual password hashing, create a class that implements the `CustomPasswordProvider`as shown in the example below.

This is an example of providing a custom password provider using the SHA256 hashing algorithm.
The following snippet shows how to set a custom password provider that uses the SHA256 hashing algorithm.

[source,java]
----
Expand Down Expand Up @@ -170,7 +170,7 @@ This method also allows specifying the desired amount of iterations and the salt
====
Never store passwords as a plain text for applications already running in production.
However, it is possible to store passwords as a plain text with the `@Password(PasswordType.CLEAR)` annotation when operating in a test environment.
However, it is possible to store passwords as plain text with the `@Password(PasswordType.CLEAR)` annotation when operating in a test environment.
====

== References
Expand Down

0 comments on commit 57f0b96

Please sign in to comment.