HTTP digest with hashed saved password

Question

im using HTTP Digest to connect to my Spring application using Spring DigestAuthenticationFilter. The application uses Tomcat 7. It works fine with plain text (in the database)

My problem: I want to store hashed passwords (with salt, if possible), and not in clear text. But if I understood correctly, HTTP Digest requires that the password be in clear text.

Is there a way to change this in Spring Security?

Answer 1

I want to store hashed passwords (with salt, if possible), and not in plain text. But if I understood well, an HTTP digest requires a password to be in clear text.

Is there a way to change this in Spring Security?

No, this is not mutable, at least at the time of writing this. Spring Security documentation for digest authentication reads as follows: where it is obvious that passwords should be in clear text.

Configuring UserDetailsService is necessary because DigestProcessingFilter must have direct access to the user's text password . Digest Authentication will NOT work if you use encoded passwords in your DAO.