Why is the service involved in hashing the user's password in Java?

Question

Java

Hello.

I deal with Java using examples from the site baeldung.com.
There was a question about this lesson: https://www.baeldung.com/spring-security-registrat...

Why is the service that creates the user engaged in hashing the user's password?
After all, this leaves the opportunity to set a plain-text password for the user.

Answer 1

Because nothing prevents you from doing a password complexity check on the front. And, according to the principle of single-responsibility, this is not a service business - what are the requirements for password complexity. In addition, such checks are just at the front and the place. There is no point in sending the password somewhere to the back, so that it turns out there that the password does not meet the requirements.