A translatable password validator for django, based on zxcvbn-python.
Project description
# django-zxcvbn-password-validator
A translatable password validator for django, based on zxcvbn-python and available with pip.
[![Build Status](https://travis-ci.org/Pierre-Sassoulas/django-zxcvbn-password-validator.svg?branch=master)](https://travis-ci.org/Pierre-Sassoulas/django-zxcvbn-password-validator)
[![Coverage Status](https://coveralls.io/repos/github/Pierre-Sassoulas/django-zxcvbn-password-validator/badge.svg?branch=master)](https://coveralls.io/github/Pierre-Sassoulas/django-zxcvbn-password-validator?branch=master)
[![PyPI version](https://badge.fury.io/py/django-zxcvbn-password-validator.svg)](https://badge.fury.io/py/django-zxcvbn-password-validator)
# How to use
Add it to your requirements and get it with pip.
django-zxcvbn-password-validator
Then everything happens in your settings file.
Add `'django_zxcvbn_password_validator'` in the `INSTALLED_APPS` :
INSTALLED_APPS = [
...
'django_zxcvbn_password_validator'
]
Modify `AUTH_PASSWORD_VALIDATORS` :
AUTH_PASSWORD_VALIDATORS = [
{
'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
},
{
'NAME': 'django_zxcvbn_password_validator.ZxcvbnPasswordValidator',
},
...
]
You could choose to use zxcvbn alone, but I personally still use Django's `UserAttributeSimilarityValidator`,
because there seems to be still be some problem with it integrating user informations with zxcvbn (as of june 2018).
Finally you can set the `PASSWORD_MINIMAL_STRENGH` to your liking (default is 2),
every password scoring lower than this number will be rejected :
# 0 too guessable: risky password. (guesses < 10^3)
# 1 very guessable: protection from throttled online attacks. (guesses < 10^6)
# 2 somewhat guessable: protection from unthrottled online attacks. (guesses < 10^8)
# 3 safely unguessable: moderate protection from offline slow-hash scenario. (guesses < 10^10)
# 4 very unguessable: strong protection from offline slow-hash scenario. (guesses >= 10^10)
# Contributing
## Lint
isort -rc django_zxcvbn_password_validator
pylint django_zxcvbn_password_validator
## Testing
python manage.py test
## Coverage
coverage run ./manage.py test
coverage html
# Open htmlcov/index.html in a navigator
## I18n
````
python manage.py makemessages
# python manage.py createsuperuser ? (You need to login for rosetta)
python manage.py runserver
# Access http://localhost:8000/admin to login
# Then go to http://localhost:8000/rosetta to translate
python manage.py makemessages --no-obsolete --no-wrap
````
A translatable password validator for django, based on zxcvbn-python and available with pip.
[![Build Status](https://travis-ci.org/Pierre-Sassoulas/django-zxcvbn-password-validator.svg?branch=master)](https://travis-ci.org/Pierre-Sassoulas/django-zxcvbn-password-validator)
[![Coverage Status](https://coveralls.io/repos/github/Pierre-Sassoulas/django-zxcvbn-password-validator/badge.svg?branch=master)](https://coveralls.io/github/Pierre-Sassoulas/django-zxcvbn-password-validator?branch=master)
[![PyPI version](https://badge.fury.io/py/django-zxcvbn-password-validator.svg)](https://badge.fury.io/py/django-zxcvbn-password-validator)
# How to use
Add it to your requirements and get it with pip.
django-zxcvbn-password-validator
Then everything happens in your settings file.
Add `'django_zxcvbn_password_validator'` in the `INSTALLED_APPS` :
INSTALLED_APPS = [
...
'django_zxcvbn_password_validator'
]
Modify `AUTH_PASSWORD_VALIDATORS` :
AUTH_PASSWORD_VALIDATORS = [
{
'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
},
{
'NAME': 'django_zxcvbn_password_validator.ZxcvbnPasswordValidator',
},
...
]
You could choose to use zxcvbn alone, but I personally still use Django's `UserAttributeSimilarityValidator`,
because there seems to be still be some problem with it integrating user informations with zxcvbn (as of june 2018).
Finally you can set the `PASSWORD_MINIMAL_STRENGH` to your liking (default is 2),
every password scoring lower than this number will be rejected :
# 0 too guessable: risky password. (guesses < 10^3)
# 1 very guessable: protection from throttled online attacks. (guesses < 10^6)
# 2 somewhat guessable: protection from unthrottled online attacks. (guesses < 10^8)
# 3 safely unguessable: moderate protection from offline slow-hash scenario. (guesses < 10^10)
# 4 very unguessable: strong protection from offline slow-hash scenario. (guesses >= 10^10)
# Contributing
## Lint
isort -rc django_zxcvbn_password_validator
pylint django_zxcvbn_password_validator
## Testing
python manage.py test
## Coverage
coverage run ./manage.py test
coverage html
# Open htmlcov/index.html in a navigator
## I18n
````
python manage.py makemessages
# python manage.py createsuperuser ? (You need to login for rosetta)
python manage.py runserver
# Access http://localhost:8000/admin to login
# Then go to http://localhost:8000/rosetta to translate
python manage.py makemessages --no-obsolete --no-wrap
````
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Close
Hashes for django-zxcvbn-password-validator-1.2.0.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | c61528bf6ce2a6575f5b8a454e77367c211a923494e5f72f5d33bd528604132e |
|
MD5 | 1554eccb50baeecccd1f6926b46ca07a |
|
BLAKE2b-256 | aa38e8d18204d37be7e032c4bf4884ef69c57765883adb33e36106d6cb4986b1 |