com.iizix.passwordpolicy

Class PasswordPolicy

java.lang.Object

com.iizix.passwordpolicy.PasswordPolicy

public class PasswordPolicy
extends Object

Class used to handle password policies.

Author:

Christopher Mindus

Method Summary

Modifier and Type	Method and Description
boolean	canChangePassword() Checks if the password can be changed or not.
String	check(String password) Estimate password strength if it's OK, and if it is, null is returned.
static PasswordPolicy	createAdminPolicyWithAdvancedEntropyChecking() Creates a password policy for administrators with its defaults, but with the addition of advanced entropy checking.
static PasswordPolicy	from(PolicyProps settings) Creates the password policy based on pure defaults if the property container is null, otherwise based on those settings.
static String	generateStrongPassword() Generates a new strong random password.
int	getHistoryLength() Gets the password history length.
boolean	mustChangePassword() Checks if the password must be changed at next login.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

from

public static PasswordPolicy from(PolicyProps settings)

Creates the password policy based on pure defaults if the property container is null, otherwise based on those settings.

Parameters:

settings - The settings property container, or null for defaults.

Returns:

The password policy.

createAdminPolicyWithAdvancedEntropyChecking

public static PasswordPolicy createAdminPolicyWithAdvancedEntropyChecking()

Creates a password policy for administrators with its defaults, but with the addition of advanced entropy checking.

Returns:

The password policy.

generateStrongPassword

public static String generateStrongPassword()

Generates a new strong random password.

Returns:

The new strong password of minimum 10 characters meeting all the criteria for "difficult password", except history for the user's password policy.

check

public String check(String password)

Estimate password strength if it's OK, and if it is, null is returned.

Parameters:

password - The password to check.

Returns:

A descriptive string with password problems, potentially with new-line characters.

getHistoryLength

public int getHistoryLength()

Gets the password history length.

Returns:

The length, zero for no history.

canChangePassword

public boolean canChangePassword()

Checks if the password can be changed or not.

Returns:

true for changeable, false for fixed.

mustChangePassword

public boolean mustChangePassword()

Checks if the password must be changed at next login.

Returns:

true for must change, false for not required.