package org.jasig.cas.adaptors.jdbc;

 import java.security.GeneralSecurityException;

 import org.jasig.cas.authentication.HandlerResult;

 import org.jasig.cas.authentication.PreventedException;

 import org.jasig.cas.authentication.UsernamePasswordCredential;

 import org.jasig.cas.authentication.principal.SimplePrincipal;

 import org.springframework.dao.DataAccessException;

 import org.springframework.dao.IncorrectResultSizeDataAccessException;

 import javax.security.auth.login.AccountNotFoundException;

 import javax.security.auth.login.FailedLoginException;

 import javax.validation.constraints.NotNull;

 /**

  * Class that if provided a query that returns a password (parameter of query

  * must be username) will compare that password to a translated version of the

  * password provided by the user. If they match, then authentication succeeds.

  * Default password translator is plaintext translator.

  *

  * @author Scott Battaglia

  * @author Dmitriy Kopylenko

  * @author Marvin S. Addison

  *

  * @since 3.0

  */

 public class TyQueryDatabaseAuthenticationHandler extends AbstractJdbcUsernamePasswordAuthenticationHandler {

     @NotNull

     private String sql;

     private boolean useDefaultPassword;

     private String defaultPassword;

     /** {@inheritDoc} */

     @Override

     protected final HandlerResult authenticateUsernamePasswordInternal(final UsernamePasswordCredential credential)

             throws GeneralSecurityException, PreventedException {

         final String username = credential.getUsername();

         final String password = useDefaultPassword ? defaultPassword : credential.getPassword();

         final String encryptedPassword = this.getPasswordEncoder().encode(password);

         try {

             final String dbPassword = getJdbcTemplate().queryForObject(this.sql, String.class, username);

             if (!dbPassword.equals(encryptedPassword)) {

                 throw new FailedLoginException("Password does not match value on record.");

             }

         } catch (final IncorrectResultSizeDataAccessException e) {

             if (e.getActualSize() == 0) {

                 throw new AccountNotFoundException(username + " not found with SQL query");

             } else {

                 throw new FailedLoginException("Multiple records found for " + username);

             }

         } catch (final DataAccessException e) {

             throw new PreventedException("SQL exception while executing query for " + username, e);

         }

         return createHandlerResult(credential, new SimplePrincipal(username), null);

     }

     /**

      * @param sql The sql to set.

      */

     public void setSql(final String sql) {

         this.sql = sql;

     }

      /**

      * @param isUseDefaultPassword The useDefaultPassword to set.

      */

     public void setUseDefaultPassword(final boolean isUseDefaultPassword) {

         this.useDefaultPassword = isUseDefaultPassword;

     }

      /**

      * @param defaultPassword The defaultPassword to set.

      */

     public void setDefaultPassword(final String defaultPassword) {

         this.defaultPassword = defaultPassword;

     }

 }

   <bean id="dbAuthenticationHandler"

     class="org.jasig.cas.adaptors.jdbc.TyQueryDatabaseAuthenticationHandler">

       <property name="dataSource" ref="dataSource"></property>

       <property name="sql" value="select EmpPass as password from SsoAccount where EmpCode=? "></property>

       <property name="passwordEncoder" ref="passwordEncoder"></property>

       <property name="useDefaultPassword" value="true"></property>

       <property name="defaultPassword" value="111111"></property>

   </bean>