RollerworksPasswordStrengthBundle

This bundle provides a validator for ensuring strong passwords in Symfony2 applications.

Passwords are validated using strength-levels (weak, medium, strong etc).

If you want to use a more detailed configuration (pattern requirement), you can use the PasswordStrengthBundle provided by John Bafford.

You can use this bundle and the one provided by John Bafford side by side without any conflict.

Its however not recommended to use both the pattern-requirement and strength-level constraint
at the same property/method, as both provide similar functionality.

Installation

Step 1: Using Composer (recommended)

To install RollerworksPasswordStrengthBundle with Composer just add the following to your composer.json file:

// composer.json
{
    // ...
    require: {
        // ...
        "rollerworks/password-strength-bundle": "master-dev"
    }
}

NOTE: Please replace master-dev in the snippet above with the latest stable branch, for example 1.0.*.

Then, you can install the new dependencies by running Composer's update command from the directory where your composer.json file is located:

$ php composer.phar update rollerworks/password-strength-bundle

Now, Composer will automatically download all required files, and install them for you. All that is left to do is to update your AppKernel.php file, and register the new bundle:

<?php

// in AppKernel::registerBundles()
$bundles = array(
    // ...
    new Rollerworks\Bundle\PasswordStrengthBundle\RollerworksPasswordStrengthBundle(),
    // ...
);

Step 1 (alternative): Using deps file (Symfony 2.0.x)

First, checkout a copy of the code. Just add the following to the deps file of your Symfony Standard Distribution:

[RollerworksPasswordStrengthBundle]
    git=https://github.com/rollerworks/PasswordStrengthBundle.git
    target=/bundles/Rollerworks/Bundle/PasswordStrengthBundle

NOTE: You can add version tag in the snippet above with the latest stable branch, for example version=origin/1.0.

Then register the bundle with your kernel:

<?php

// in AppKernel::registerBundles()
$bundles = array(
    // ...
    new Rollerworks\Bundle\PasswordStrengthBundle\RollerworksPasswordStrengthBundle(),
    // ...
);

Make sure that you also register the namespace with the autoloader:

<?php

// app/autoload.php
$loader->registerNamespaces(array(
    // ...
    'Rollerworks'              => __DIR__.'/../vendor/bundles',
    // ...
));

Now use the vendors script to clone the newly added repositories into your project:

$ php bin/vendors install

Step 1 (alternative): Using submodules (Symfony 2.0.x)

If you're managing your vendor libraries with submodules, first create the vendor/bundles/Rollerworks/Bundle directory:

$ mkdir -pv vendor/bundles/Rollerworks/Bundle

Next, add the necessary submodule:

$ git submodule add git://github.com/rollerworks/PasswordStrengthBundle.git vendor/bundles/Rollerworks/Bundle/PasswordStrengthBundle

Step2: Configure the autoloader

Add the following entry to your autoloader:

<?php
// app/autoload.php

$loader->registerNamespaces(array(
    // ...
    'Rollerworks'              => __DIR__.'/../vendor/bundles',
    // ...
));

Step3: Enable the bundle

Finally, enable the bundle in the kernel:

<?php

// in AppKernel::registerBundles()
$bundles = array(
    // ...
    new Rollerworks\Bundle\PasswordStrengthBundle\RollerworksPasswordStrengthBundle(),
    // ...
);

Congratulations! You're ready!

Basic Usage

Strength validation

Validates the passwords strength-level (weak, medium, strong etc).

Password blacklisting

There are times you want forbid (blacklist) a password from usage.

Passwords are blacklisted using providers which can either an array or (flat-file) database (which you can update regularly).

With the default installation the following providers can be used.

• Noop: Default provider, does nothing.
• Array: Simple in memory blacklist provider (not recommended for big lists)
• Sqlite: Provides the blacklist using a SQLite3 database file.

But building your own is also possible. Documentation on this is currently missing, see current providers for more information.