Replace use of common-codec

Pulling in this dependency is overkill for generating MD5s. We
previously pulled it in anyway via Apache HttpClient.

Author: oschwald

CHANGELOG.md

@@ -62,6 +62,7 @@ CHANGELOG
   * `Mastercard`
   * `UnionPay`
   * `Visa`
+* Apache Commons Codec is no longer used for generating MD5s.
 
 1.18.0 (2021-08-31)
 -------------------

pom.xml

@@ -65,11 +65,6 @@
             <artifactId>geoip2</artifactId>
             <version>3.0.0</version>
         </dependency>
-        <dependency>
-            <groupId>commons-codec</groupId>
-            <artifactId>commons-codec</artifactId>
-            <version>1.15</version>
-        </dependency>
         <dependency>
             <groupId>commons-validator</groupId>
             <artifactId>commons-validator</artifactId>

src/main/java/com/maxmind/minfraud/request/Account.java

@@ -2,7 +2,11 @@
 
 import com.fasterxml.jackson.annotation.JsonProperty;
 import com.maxmind.minfraud.AbstractModel;
-import org.apache.commons.codec.digest.DigestUtils;
+
+import java.math.BigInteger;
+import java.nio.charset.Charset;
+import java.security.MessageDigest;
+import java.security.NoSuchAlgorithmException;
 
 /**
  * Account related data for the minFraud request
@@ -46,8 +50,15 @@ public Account.Builder userId(String id) {
          * @return The builder object.
          */
         public Account.Builder username(String username) {
-            this.usernameMd5 = DigestUtils.md5Hex(username);
-            return this;
+            try {
+                MessageDigest d = MessageDigest.getInstance("MD5");
+                d.update(username.getBytes(Charset.forName("UTF8")));
+                BigInteger i = new BigInteger(1, d.digest());
+                this.usernameMd5 = String.format("%032x", i);
+                return this;
+            } catch (NoSuchAlgorithmException e) {
+                throw new RuntimeException("No MD5 algorithm for MessageDigest!", e);
+            }
         }
 
         /**

src/main/java/com/maxmind/minfraud/request/Email.java

@@ -2,11 +2,14 @@
 
 import com.fasterxml.jackson.annotation.JsonProperty;
 import com.maxmind.minfraud.AbstractModel;
-import org.apache.commons.codec.digest.DigestUtils;
 import org.apache.commons.validator.routines.DomainValidator;
 import org.apache.commons.validator.routines.EmailValidator;
 
+import java.math.BigInteger;
 import java.net.IDN;
+import java.nio.charset.Charset;
+import java.security.MessageDigest;
+import java.security.NoSuchAlgorithmException;
 import java.util.Collections;
 import java.util.HashMap;
 import java.util.Map;
@@ -150,7 +153,15 @@ public String getAddress() {
             return null;
         }
         if (hashAddress) {
-            return DigestUtils.md5Hex(cleanAddress(address));
+            String cleanAddress = cleanAddress(address);
+            try {
+                MessageDigest d = MessageDigest.getInstance("MD5");
+                d.update(cleanAddress.getBytes(Charset.forName("UTF8")));
+                BigInteger i = new BigInteger(1, d.digest());
+                return  String.format("%032x", i);
+            } catch (NoSuchAlgorithmException e) {
+                throw new RuntimeException("No MD5 algorithm for MessageDigest!", e);
+            }
         }
         return address;
     }