public static AuthToken checkOneTimeAccessToken(String userToken) throws UnauthorizedException {
        String accessToken = JiveGlobals.getXMLProperty(ONE_TIME_PROPERTY);
        if (isOneTimeAccessTokenEnabled() && accessToken.equals(userToken)) {
            // Remove the one time token.
            // This invocation will overwrite the openfire.xml with removing the OneTimeAccessToken tag.
            JiveGlobals.deleteXMLProperty(ONE_TIME_PROPERTY);
            Log.info("Login with the one time access token.");
            return AuthToken.generateOneTimeToken(accessToken);
        } else {
            throw new UnauthorizedException();
        }
    }
Returns a Blowfish cipher that can be used for encrypting and decrypting passwords.
The encryption key is stored as the Jive property "passwordKey". If it's not present,
it will be automatically generated.

@return the Blowfish cipher, or {@code null} if Openfire is not able to create a Cipher;
     for example, during setup mode.
xmppserver/src/main/java/org/jivesoftware/openfire/auth/AuthFactory.java