Search for a command to run...
I have been writing code since the mid 1990s. I started out my professional career building applications and games for mobile phones (J2ME, Palm, Symbian, etc) then some Android, iOS and then moved to building server applications using Spring framework, and frontend using JQuery. Now working on Spring Boot, Docker, Flutter etc.
No comments yet. Be the first to comment.
For those who work extensively with Asciidoc files, having a robust and feature-rich editing tool is essential. We have already see the power of Asciidoc and Asciidoctor in our previous articles as a writer's tool and a presentation tool. In this art...
The previous article our focus has been on delving into foundational elements of LangChain4j such as ChatLanguageModel, ChatMessage, ChatMemory, and others. Working with components at this level offers great flexibility and complete control, but it c...
In the preceding article, we were introduced to AI/ML concepts and explored the process of running a local Large Language Model (LLM) - Ollama. We further delved into interacting with it via Java using JBang and Langchain4j. Now, let's explore into ...
The realm of AI/ML, especially Generative AI, has garnered significant attention worldwide following the emergence of ChatGPT. Consequently, there has been a surge of interest in developing various models and tools within this domain. In this article...
In today's fast-paced tech world, giving effective presentations is crucial for conveying complex ideas and engaging audiences. While Markdown has emerged as a popular lightweight markup language for creating rich text documents, its use in creating ...
Applications and websites that allow users to sign-up mostly have restrictions of password like
Implementing these is not trivial in an application and Passay provides the solutions to applications that want to implementation password validation and generation applying the aforesaid like restrictions.
Password generation and validation requires a certain set of rules to be defined. Rules can be broadly categorized into
In order to implement the positive and negative rule requirements, the Passay library provided 3 components
Rule interface - that helps define different Rule types that is used to validate if a password meets the set policyPasswordValidator - A validator class that validates a given password against a rule setPasswordGenerator - A password generation class that generates password matching a rule setPassay already provides a bunch of classes for both the positive and negative rules sets that include
AllowedCharacterRule, CharacterRule, LengthRule and a few more for positive rulesRepeatCharactersRule, UsernameRule and much more on the negative rulesHowever, we can define our own rules by defining a class that implements the Rule interface.
Now let's see Passay in action. In the first code snippet, we define a set of rules that the password provided should satisfy, they are
Here is the code snippet
PasswordValidator validator = new PasswordValidator(
// length between 8 and 16 characters
new LengthRule(8, 12),
// at least one upper-case character
new CharacterRule(EnglishCharacterData.UpperCase, 1),
// at least one lower-case character
new CharacterRule(EnglishCharacterData.LowerCase, 1),
// at least one digit character
new CharacterRule(EnglishCharacterData.Digit, 1),
// at least one symbol (special character)
new CharacterRule(EnglishCharacterData.Special, 1),
// define some illegal sequences that will fail when >= 5 chars long
// alphabetical is of the form 'abcde', numerical is '34567'
// the false parameter indicates that wrapped sequences are allowed; e.g.
// 'xyzabc'
new IllegalSequenceRule(EnglishSequenceData.Alphabetical, 5, false),
new IllegalSequenceRule(EnglishSequenceData.Numerical, 5, false),
new RepeatCharactersRule(4),
// no whitespace
new WhitespaceRule());
final char[] password = System.console().readPassword("Password: ");
RuleResult result = validator.validate(new PasswordData(new String(password)));
if (result.isValid())
{
System.out.println("Password is valid");
}
else
{
System.out.println("Invalid password:");
for (String msg : validator.getMessages(result))
{
System.out.println(msg);
}
}
The rules should be self-explanatory. When the code is run, it asks for a password, if we provide a password say 88888, the following would be the output
Password: <88888>
Invalid password:
Password must be 8 or more characters in length.
Password must contain 1 or more uppercase characters.
Password must contain 1 or more lowercase characters.
Password must contain 1 or more special characters.
Password contains 1 sequences of 4 or more repeated characters, but only 1 allowed: [88888].
As we can clearly see, Passay ensures that all the rules are met before accepting the password
The next part to this is the password generation feature that Passay provides. Let's look at the code snippet. The additional catch to that is the we are validating the password generated by Passay using its own validator to check if the password generated adheres to the rules set in the generation.
PasswordGenerator generator = new PasswordGenerator();
// Generated password is 12 characters long, which complies with policy
String passwd = generator.generatePassword(12, rules);
System.out.println("Generated Password:" + passwd);
PasswordValidator validator2 = new PasswordValidator(
// length between 8 and 16 characters
new LengthRule(12),
// at least one upper-case character
new CharacterRule(EnglishCharacterData.UpperCase, 1),
// at least one lower-case character
new CharacterRule(EnglishCharacterData.LowerCase, 1),
// at least one digit character
new CharacterRule(EnglishCharacterData.Digit, 4));
RuleResult res = validator2.validate(new PasswordData(passwd));
if (res.isValid())
{
System.out.println("Valid");
}
else
{
System.out.println("Invalid");
}
Running the code would produce an output similar to this
Generated Password:Rb4Xdj1KO570
Valid
Passay definitely makes life easy for developers who want to validate/generate passwords. In addition to the examples above, Passay provides much more complex scenarios like historical passwords where password should be any of the previous 3 passwords; satisfy m of n rules defined and so on. In addition the rule set is extensible by implementing the Rule interface for additional rules.
Head on to www.passay.org for more details.
Happy coding!
Image Credit: Pixabay