How do I modify the encryption used by Broadleaf?
We have the following properties that can be set, one for site and one for admin:
-- Out of box password encoder password.site.encoder=org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder password.admin.encoder=org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder -- No password encoder, useful for local dev work
password.site.encoder=org.springframework.security.crypto.password.NoOpPasswordEncoder
password.admin.encoder=org.springframework.security.crypto.password.NoOpPasswordEncoder
Out of box we use the BCryptPasswordEncoder but this can be changed to use encoders that implement SpringSecurity's PasswordEncoder.