Merge pull request #138 from Stunc0/adding-password-regexp-validation

Adding passwords regexp validation.

Author: webvimark

README.md

@@ -55,6 +55,18 @@ Configuration
 
 		// 'enableRegistration' => true,
 
+		// Add regexp validation to passwords. Default pattern does not restrict user and can enter any set of characters.
+		// The example below allows user to enter :
+		// any set of characters
+		// (?=\S{8,}): of at least length 8
+		// (?=\S*[a-z]): containing at least one lowercase letter
+		// (?=\S*[A-Z]): and at least one uppercase letter
+		// (?=\S*[\d]): and at least one number
+		// $: anchored to the end of the string
+
+		//'passwordRegexp' => '^\S*(?=\S{8,})(?=\S*[a-z])(?=\S*[A-Z])(?=\S*[\d])\S*$',
+		
+
 		// Here you can set your handler to change layout for any controller or action
 		// Tip: you can use this event in any module
 		'on beforeAction'=>function(yii\base\ActionEvent $event) {
@@ -254,5 +266,3 @@ FAQ
 4) Define your own UserManagementModule::$registrationFormClass. In this class you can do whatever you want like validating custom forms and saving profiles
 
 5) Create your controller where user can view profiles
-
-

UserManagementModule.php

@@ -112,6 +112,27 @@ class UserManagementModule extends \yii\base\Module
 	 */
 	public $registrationBlackRegexp = '/^(.)*admin(.)*$/i';
 
+	/**
+	 * Pattern that will be applied for password.
+	 * Default pattern does not restrict user and can enter any set of characters.
+	 *
+	 * example of pattern :
+	 * '^\S*(?=\S{8,})(?=\S*[a-z])(?=\S*[A-Z])(?=\S*[\d])\S*$'
+	 *
+	 * This example pattern allow user enter only:
+	 *
+	 * ^: anchored to beginning of string
+	 * \S*: any set of characters
+	 * (?=\S{8,}): of at least length 8
+	 * (?=\S*[a-z]): containing at least one lowercase letter
+	 * (?=\S*[A-Z]): and at least one uppercase letter
+	 * (?=\S*[\d]): and at least one number
+	 * $: anchored to the end of the string
+	 *
+	 * @var string
+	 */
+	 public $passwordRegexp = '/^(.*)+$/';
+
 	/**
 	 * Affects only web interface in "/user-management/user-permission/set" route. Tt means you still can assign
 	 * multiple roles (for example via migrations) even if this attribute is "false"

models/User.php

@@ -264,6 +264,7 @@ public function rules()
 			['password', 'required', 'on'=>['newUser', 'changePassword']],
 			['password', 'string', 'max' => 255, 'on'=>['newUser', 'changePassword']],
 			['password', 'trim', 'on'=>['newUser', 'changePassword']],
+			['password', 'match', 'pattern' => Yii::$app->getModule('user-management')->passwordRegexp],
 
 			['repeat_password', 'required', 'on'=>['newUser', 'changePassword']],
 			['repeat_password', 'compare', 'compareAttribute'=>'password'],

models/forms/ChangeOwnPasswordForm.php

@@ -35,6 +35,7 @@ public function rules()
 			[['password', 'repeat_password'], 'required'],
 			[['password', 'repeat_password', 'current_password'], 'string', 'max'=>255],
 			[['password', 'repeat_password', 'current_password'], 'trim'],
+			['password', 'match', 'pattern' => Yii::$app->getModule('user-management')->passwordRegexp],
 
 			['repeat_password', 'compare', 'compareAttribute'=>'password'],
 

models/forms/RegistrationForm.php

@@ -33,6 +33,7 @@ public function rules()
 			['username', 'purgeXSS'],
 
 			['password', 'string', 'max' => 255],
+			['password', 'match', 'pattern' => Yii::$app->getModule('user-management')->passwordRegexp],
 
 			['repeat_password', 'compare', 'compareAttribute'=>'password'],
 		];