Download the PHP package terminal42/contao-password-validation without Composer
On this page you can find all versions of the php package terminal42/contao-password-validation. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download terminal42/contao-password-validation
More information about terminal42/contao-password-validation
Files in terminal42/contao-password-validation
Package contao-password-validation
Short Description A Contao bundle that validates user passwords against your password policy
License MIT
Homepage https://github.com/terminal42/contao-password-validation
Informations about the package contao-password-validation
terminal42/contao-password-validation
A Contao bundle that validates user passwords against your password policy.
Features
- Validate a password against your organization policies
- Force members to do a password-change
Installation
Choose the installation method that matches your workflow!
Installation via Contao Manager
Search for terminal42/contao-password-validation
in the Contao Manager and add it to your installation. Finally,
update the packages.
Manual installation
Add a composer dependency for this bundle. Therefore, change in the project root and run the following:
Depending on your environment, the command can differ, i.e. starting with php composer.phar …
if you do not have
composer installed globally.
Then, update the database via the Contao install tool.
Configuration
Password validation
Add the following configuration parameters to your app/config/config.yml
:
(Skip options that you do not need)
Parameter | Purpose |
---|---|
password_history : |
Keep track of the latest n passwords, and force the users not to choose one of their recent passwords. |
change_days : |
Ask the user to change their password after certain days. |
haveibeenpwned : |
Check the user password against known data breaches reported to ';--have i been pwned?. The configuration allows you to specify an integer to define the minimum number of data breaches the password needs to occur in to fail password validation. |
Password-change
- Create a "password-change" page and place a password-change module on it. Select this page as password-change page in the page root.
- You can now force members to change their passwords by ticking the corresponding checkbox in the member edit-mask.
Add your own password validator
You can add your own validation rule, e.g. a dictionary check.
Create a class that implements PasswordValidatorInterface
. Then, create and tag a corresponding service.
License
This bundle is released under the MIT license
All versions of contao-password-validation with dependencies
contao/core-bundle Version ^4.13 || ^5.0
doctrine/dbal Version ^3.3
paragonie/hidden-string Version ^1.0
symfony/config Version ^5.0 || ^6.0 || ^7.0
symfony/dependency-injection Version ^5.0 || ^6.0 || ^7.0
symfony/http-client-contracts Version ^3
symfony/http-foundation Version ^5.0 || ^6.0 || ^7.0
symfony/http-kernel Version ^5.0 || ^6.0 || ^7.0
symfony/password-hasher Version ^5.0 || ^6.0 || ^7.0
symfony/security-core Version ^5.0 || ^6.0 || ^7.0
symfony/string Version ^5.0 || ^6.0 || ^7.0
symfony/translation-contracts Version ^3