search

roundcube / roundcubemail

The Roundcube Webmail suite
https://roundcube.net
GNU General Public License v3.0
5.92k stars 1.64k forks source link

Password: Password strength meter #7407

Open interduo opened 4 years ago

interduo commented 4 years ago

I use password_strength_driver as zxcvbn.

I found: https://www.roundcubeforum.net/index.php?topic=24868.0

Is that feature allready implemented in roundcube 1.4.x?

I tried to find that in plugin README and tried to search github repository resources.

If not - are there plans to do this in some next releases?

alecpl commented 4 years ago

It's not implemented and it's not high on my TODO list. Pull requests appreciated.

mckaygerhard commented 3 years ago

where is documented the password min stretch? what are the new equivalent to passwrod alpha dash .. etc?

i searh the REAME and there's no doc.. just "each driver has their own stret5ch method"

alecpl commented 3 years ago

All possible options are listed in the config.inc.php.dist file. @mckaygerhard This is not a discussion forum, please do not hijack tickets.

mckaygerhard commented 3 years ago

@alecpl the stretch is not described.. just said

Note: Password strength is scored from 1 (week) to 5 (strong).

there's no description of the alpha-numeric one equivalent! i test and only permit with 1 alphanumeric but not alpha-numeric with dots .. https://github.com/roundcube/roundcubemail/blob/2f643141b4e16dd70f0d1dda283c2106e63a3009/plugins/password/config.inc.php.dist#L22

also README only has one password strength dirver documented https://github.com/roundcube/roundcubemail/blob/2f643141b4e16dd70f0d1dda283c2106e63a3009/plugins/password/README#L414 and still is not fully supported! so .. there's no driver strengch support then?

alecpl commented 3 years ago

I'm not sure what do you mean. There are two strength drivers and it is supported, at least in 1.5.

If the driver is not set the checking code is just:

 $score = (!preg_match("/[0-9]/", $passwd) || !preg_match("/[^A-Za-z0-9]/", $passwd)) ? 1 : 5;

so, 1 is a default and 5 is when the password contains a digit and non-alpha character.