Add remember me capabilities to RAP

[lgpl/argeo-commons.git] / basic / runtime / org.argeo.basic.nodeps / src / main / java / org / argeo / util / crypto / PasswordBasedEncryption.java

diff --git a/basic/runtime/org.argeo.basic.nodeps/src/main/java/org/argeo/util/crypto/PasswordBasedEncryption.java b/basic/runtime/org.argeo.basic.nodeps/src/main/java/org/argeo/util/crypto/PasswordBasedEncryption.java
index ab36e5d8f00e02937a6cd0d396037bf846798f88..18cccd4e1271bcf964ebc45d0d8e90ccc96a0c66 100644 (file)
--- a/basic/runtime/org.argeo.basic.nodeps/src/main/java/org/argeo/util/crypto/PasswordBasedEncryption.java
+++ b/basic/runtime/org.argeo.basic.nodeps/src/main/java/org/argeo/util/crypto/PasswordBasedEncryption.java
@@ -40,10 +40,18 @@ public class PasswordBasedEncryption {
        private final Cipher ecipher;
        private final Cipher dcipher;
 
+       /**
+        * This is up to the caller to clear the passed array. Neither copy of nor
+        * reference to the passed array is kept
+        */
        public PasswordBasedEncryption(char[] password) {
                this(password, DEFAULT_SALT_8, DEFAULT_IV_16);
        }
 
+       /**
+        * This is up to the caller to clear the passed array. Neither copies of nor
+        * references to the passed arrays are kept
+        */
        public PasswordBasedEncryption(char[] password, byte[] passwordSalt,
                        byte[] initializationVector) {
                try {