search

rollerworks / PasswordStrengthBundle

Symfony Password strength and blacklisting validator bundle
MIT License
142 stars 26 forks source link

Password Strength Check #54

Closed rtoledof closed 9 years ago

rtoledof commented 9 years ago

I'm trying to use the bundle but when I try to create a user and generate a password for example $2y$15$9ce44cdaed44a94f25789efCWKw.ziTvGBN4WRTmtgsg1Yce2BKo2 this is the password I'm generating when try to save the entity in database the form return an error and the error said password too weak and I think this password isn't weak or I'm wrong. What is the problem??? I tried to change the minStrength parameter but the error continues

mennowame commented 9 years ago

It looks like you confused the generated password with the hashed version of that password. The string you pasted here looks like the salted & hashed version of a password. Maybe you can first find the original password that you generated and check if that meets all the strength requirements.

rtoledof commented 9 years ago

I tried to use a random string generator to create the password. Now I'm passing a string like "pKeg0Ndvd8BhOVa1NQPDIguf2FuszrWE0w4BgSPbP1Vyp35ThL" and the strength checker told me "Your password must include both upper and lower case letters." What is the problem now?? Any can help me??

mennowame commented 9 years ago

A bit difficult to help without further context. To help you find the problem/solution: This is not in the strength checker / strength Validator, but in the requirements Validator

rtoledof commented 9 years ago

I think was my problem because I was apply the assert to the field password and the password is encrypt for symfony automatically I solve it apply the assert to the plainPassword field from the FOSUserBundle sorry.

sstok commented 9 years ago

No problem ;) glad you solved it. Thanks mennowame for helping.