Keycloak自定义PasswordHashProvider，每个连接上的salt更改

import org.keycloak.models.PasswordPolicy;
import org.keycloak.models.RealmModel;
import org.keycloak.models.UserModel;
import org.keycloak.provider.ProviderConfigProperty;
import org.keycloak.storage.password.PasswordHashProvider;
import org.keycloak.storage.password.PasswordHashProviderFactory;
import org.keycloak.storage.password.PasswordHasher;

import java.util.ArrayList;
import java.util.List;
import java.util.Map;
import java.util.SecureRandom;

public class CustomPasswordHashProvider implements PasswordHashProvider, PasswordHashProviderFactory {

    private static final String ID = "custom-password-hash-provider";
    private static final List<ProviderConfigProperty> CONFIG_PROPERTIES = new ArrayList<>();

    static {
        CONFIG_PROPERTIES.add(new ProviderConfigProperty("saltLength", "Salt Length", "integer", "16", "Salt length for the custom hash provider"));
    }

    @Override
    public void init(RealmModel realm) {
        // Initialization code here
    }

    @Override
    public void postInit(RealmModel realm) {
        // Post-initialization code here
    }

    @Override
    public String getId() {
        return ID;
    }

    @Override
    public boolean supportsHashType(String hashType) {
        return true; // Support all hash types
    }

    @Override
    public PasswordHasher getPasswordHasher() {
        return new PasswordHasher() {
            private final SecureRandom random = new SecureRandom();

            @Override
            public String hash(String password) {
                byte[] salt = new byte[Integer.parseInt(getConfig().getProperty("saltLength", "16"))];
                random.nextBytes(salt);
                // Implement your custom hashing algorithm here
                return "customHash(" + new String(salt) + "," + password + ")";
            }

            @Override
            public boolean verify(String rawPassword, String hashedPassword) {
                // Implement verification logic here
                return hashedPassword.equals(hash(rawPassword));
            }

            @Override
            public boolean needsRehash(String hashedPassword) {
                return false; // Always rehash if needed
            }
        };
    }

    @Override
    public void close() {
        // Cleanup code here
    }

    @Override
    public String getDisplayType() {
        return "Custom Password Hash Provider";
    }

    @Override
    public String getHelpText() {
        return "A custom password hash provider that changes the salt on each connection.";
    }

    @Override
    public List<ProviderConfigProperty> getConfigProperties() {
        return CONFIG_PROPERTIES;
    }

    @Override
    public Map<String, String> getDefaultConfig() {
        return Map.of("saltLength", "16");
    }
}