Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
34 changes: 0 additions & 34 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -48,40 +48,6 @@ Validates the passwords strength-level (weak, medium, strong etc).

Validates the passwords using explicitly configured requirements (letters, caseDiff, numbers, requireSpecialCharacter).

### [Password blacklisting](docs/blacklist.md) (deprecated)

⚠️ **DEPRECATED**

> This validator is deprecated in favor of the [PasswordCommonList Validator](https://github.com/rollerworks/password-common-list).
>
> The PasswordCommonList validator contains a big list of commonly used passwords, many that are known to be insecure.
> As updating the list of forbidden passwords is not something done regularly this is recommended over manually updating.
>
> Alternatively the Symfony [NotCompromisedPassword] validator can be used for a more regularly updated list.

There are times you want forbid (blacklist) a password from usage.

Passwords are blacklisted using providers which can either be an array or
(flat-file) database (which you can update regularly).

With the default installation the following providers can be used:

* Noop: Default provider, does nothing.

* Array: Simple in memory blacklist provider (not recommended for big lists)

* Sqlite: Provides the blacklist using a SQLite3 database file.

* Pdo: Provides the blacklist using the PDO extension.

### PwnedPassword (deprecated)

⚠️ **This validator is deprecated in favor of the Symfony [NotCompromisedPassword] validator.**

Validates that the requested password was not found in a trove of compromised passwords found at <https://haveibeenpwned.com/>.

To enable this you must install the suggested package "guzzlehttp/psr7" as well as a HttpClient such as "php-http/guzzle6-adapter".

## Versioning

For transparency and insight into the release cycle, and for striving
Expand Down
10 changes: 10 additions & 0 deletions UPGRADE.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,16 @@
UPGRADE
=======

## Upgrade from 1.7 to 2.0

* The blacklist validator was removed.

Use the [NotCompromisedPassword](https://symfony.com/doc/current/reference/constraints/NotCompromisedPassword.html)
validator or [PasswordCommonList Validator](https://github.com/rollerworks/password-common-list) instead.

* The PwnedPassword validator was removed in favor of the Symfon
[NotCompromisedPassword](https://symfony.com/doc/current/reference/constraints/NotCompromisedPassword.html) validator

## Upgrade from 1.6 to 1.7

* The blacklist validator was deprecated in favor of the [PasswordCommonList Validator](https://github.com/rollerworks/password-common-list).
Expand Down
6 changes: 1 addition & 5 deletions composer.json
Original file line number Diff line number Diff line change
Expand Up @@ -16,21 +16,17 @@
],
"require": {
"php": ">=7.3",
"psr/container": "^1.0 || ^2.0",
"symfony/deprecation-contracts": "^2.4 || ^3.0",
"symfony/polyfill-mbstring": "^1.5.0",
"symfony/translation": "^4.4 || ^5.0 || ^6.0",
"symfony/validator": "^4.4 || ^5.0 || ^6.0"
},
"require-dev": {
"guzzlehttp/psr7": "^1.4",
"php-http/httplug": "^1.1",
"phpspec/prophecy": "^1.10.3",
"phpspec/prophecy-phpunit": "^2.0",
"phpunit/phpunit": "^9.5",
"psr/log": "^1.0 || ^2.0",
"symfony/config": "^4.4 || ^5.0 || ^6.0",
"symfony/console": "^4.4 || ^5.0 || ^6.0",
"symfony/phpunit-bridge": "^5.3 || ^6.0"
},
"autoload": {
Expand All @@ -46,7 +42,7 @@
},
"extra": {
"branch-alias": {
"dev-main": "1.7-dev"
"dev-main": "2.0-dev"
}
},
"config": {
Expand Down
205 changes: 0 additions & 205 deletions docs/blacklist.md

This file was deleted.

1 change: 0 additions & 1 deletion phpstan.neon
Original file line number Diff line number Diff line change
Expand Up @@ -12,5 +12,4 @@ parameters:
- "#Casting to string something that's already string#"

# Tests
- '#Parameter \#1 \$password of method Rollerworks\\Component\\PasswordStrength\\Blacklist\\[a-zA-Z]+\:\:isBlacklisted\(\) expects string#'
- '#Call to an undefined method Prophecy\\Prophecy\\ObjectProphecy::[a-zA-Z0-9_]+\(\)#'
36 changes: 0 additions & 36 deletions src/Blacklist/ArrayProvider.php

This file was deleted.

27 changes: 0 additions & 27 deletions src/Blacklist/BlacklistProviderInterface.php

This file was deleted.

Loading