{ "info": { "author": "Dylan Jay", "author_email": "software@pretaweb.com", "bugtrack_url": null, "classifiers": [ "Development Status :: 5 - Production/Stable", "Environment :: Plugins", "Environment :: Web Environment", "Framework :: Plone :: 4.1", "Framework :: Plone :: 4.2", "Framework :: Plone :: 4.3", "Framework :: Zope2", "Intended Audience :: System Administrators", "Programming Language :: Python", "Programming Language :: Python :: 2.7", "Topic :: Software Development" ], "description": ".. contents::\r\n\r\nPasswordStrength\r\n================\r\n\r\nThis plugin works with Plone to allow an administrator to create\r\na password policy for their site. Once installed it provides a\r\nPluggable Authentication Service (PAS) plugin where you can create\r\nas many regular expressions rules which will each be applied against\r\npasswords during user registration. For example these rules can\r\nensure a passwords strength such as minimum length and required\r\nletters or special characters.\r\n\r\nIn Plone 4.3 and above this plugin works directly with Plones inbuilt\r\npassword policy api. In Plone 4.2 and below this plugin contains a patch \r\nto plone to use PAS validation.\r\n\r\nTests\r\n=====\r\n\r\nThis package is tested using Travis CI on Plone 4.1, 4.2, 4.3\r\nThe current status is :\r\n\r\n.. image:: https://travis-ci.org/collective/Products.PasswordStrength.png\r\n :target: http://travis-ci.org/collective/Products.PasswordStrength\r\n\r\nRequires\r\n========\r\n\r\n - PlonePAS and its dependencies\r\n - Plone 4.1, 4.2 or 4.3\r\n - better: Products.PasswordResetTool >= 2.0.18 (clearer password reset mail)\r\n - better: plone.app.locales >= 4.3.5 (clearer translations in password reset mail)\r\n\r\nInstallation\r\n============\r\n\r\n1. Install Products.PasswordStrength using buildout like any other Plone plugin. \r\n2. Once activated within your site you select ZMI > acl_users > password_strength_plugin\r\n3. Click on the properties tab and edit the validation rules. The rule error text will be used for both\r\n the password field hint to tell the user what kind of password they can pick, and also if they fail\r\n to enter a password that matches that rule.\r\n\r\nThat's it! Test it out.\r\n\r\nImplementation\r\n==============\r\n\r\nA PAS plugin for Validation checks the password against each regular\r\nexpression listed in the properties. Any rules that fail result in\r\nthe associated error messages being returned.\r\n\r\nPlone doesn't use PAS to validate passwords, so included is a patch to\r\nProducts.CMFPlone.RegistrationTool.RegistrationTool.testPasswordValidity\r\nwhich makes plone use PAS validation plugins.\r\n\r\nTODO\r\n====\r\n\r\n1. Patch or modify login_password.cpt to display directly the password constraints\r\n (