2013-12-21 05:34:34 +08:00
|
|
|
require_dependency "common_passwords/common_passwords"
|
|
|
|
|
|
2013-12-20 04:12:03 +08:00
|
|
|
class PasswordValidator < ActiveModel::EachValidator
|
|
|
|
|
|
|
|
|
|
def validate_each(record, attribute, value)
|
2017-12-01 12:19:24 +08:00
|
|
|
return unless record.password_validation_required?
|
|
|
|
|
|
2013-12-20 04:12:03 +08:00
|
|
|
if value.nil?
|
|
|
|
|
record.errors.add(attribute, :blank)
|
2016-03-04 02:01:31 +08:00
|
|
|
elsif value.length < SiteSetting.min_admin_password_length && (record.admin? || is_developer?(record.email))
|
2016-03-02 16:31:38 +08:00
|
|
|
record.errors.add(attribute, :too_short, count: SiteSetting.min_admin_password_length)
|
2013-12-20 05:15:36 +08:00
|
|
|
elsif value.length < SiteSetting.min_password_length
|
|
|
|
|
record.errors.add(attribute, :too_short, count: SiteSetting.min_password_length)
|
2015-02-26 00:59:57 +08:00
|
|
|
elsif record.username.present? && value == record.username
|
|
|
|
|
record.errors.add(attribute, :same_as_username)
|
2016-01-06 04:43:11 +08:00
|
|
|
elsif record.email.present? && value == record.email
|
2015-02-28 02:47:43 +08:00
|
|
|
record.errors.add(attribute, :same_as_email)
|
2016-08-25 00:27:09 +08:00
|
|
|
elsif record.confirm_password?(value)
|
|
|
|
|
record.errors.add(attribute, :same_as_current)
|
2013-12-21 05:34:34 +08:00
|
|
|
elsif SiteSetting.block_common_passwords && CommonPasswords.common_password?(value)
|
|
|
|
|
record.errors.add(attribute, :common)
|
2017-02-14 22:40:15 +08:00
|
|
|
elsif value.chars.uniq.length < SiteSetting.password_unique_characters
|
2017-02-10 04:00:22 +08:00
|
|
|
record.errors.add(attribute, :unique_characters)
|
2013-12-20 04:12:03 +08:00
|
|
|
end
|
|
|
|
|
end
|
|
|
|
|
|
2016-03-04 02:01:31 +08:00
|
|
|
def is_developer?(value)
|
|
|
|
|
Rails.configuration.respond_to?(:developer_emails) && Rails.configuration.developer_emails.include?(value)
|
|
|
|
|
end
|
|
|
|
|
|
2013-12-20 04:12:03 +08:00
|
|
|
end
|
