com.broadleafcommerce.auth.user.validation

Interface PasswordRequestValidator

All Known Implementing Classes:

DefaultPasswordRequestValidator

public interface PasswordRequestValidator

This validator uses regex to validate new passwords for registration and password resets. The validation has been broken down into segments that are commonly used:

• Check if the password is too short (default is 8)
• Check if the password is too long (default is 255)
• Check if the password has 'n' uppercase letter(s) (default is 1 unicode uppercase)
• Check if the password has 'n' lowercase letter(s) (default is 1 unicode lowercase)
• Check if the password has 'n' special character(s) (default is 1)
• Check if the password has 'n' digits(s) (default is 1)
• Check if the password has whitespaces
• Check if the password has sequentially repeated characters, i.e. 11, aa, -- (default is none at all)
• Check if the password and the password confirmation fields match

All of which can be configured via properties along with error messages.

Author:

Nathan Moore (nathanmoore), Phillip Verheyden (phillipuniverse)

See Also:

DefaultPasswordRequestValidator, PasswordValidatorProperties

Method Summary

Modifier and Type	Method and Description
boolean	doesPasswordConfirmationMatch(String password, String pwdConfirm) Ensures that both the passwords match, excluding 'null' matches.
PasswordValidation	validate(String password) Validates the password

Method Detail

validate

@NonNull
PasswordValidation validate(@Nullable
                                     String password)

Validates the password

Parameters:

password -

Returns:

the validation result after running through all of the validations

doesPasswordConfirmationMatch

boolean doesPasswordConfirmationMatch(@Nullable
                                      String password,
                                      @Nullable
                                      String pwdConfirm)

Ensures that both the passwords match, excluding 'null' matches. In the case that both are null, this will return false;

Parameters:

password - what the user typed in as the password

pwdConfirm - confirmation dialogue that the user gave

Returns:

true if the passwords match, false otherwise