* passwords are now validated based on - minlen - maxlen - min lower case chars - min uppper case chars - min digits - min special chars * Data::Password::zxcvbn is used to calculate password score and reject passwords with score < 3 as weak (this library is ported from the Dropbox password validation) * Add password journals and check last used passwords in the journals * Improve password generator javascript function to generate a password with at least 4 of each of the char group types. * Currently affected are subcriber and admin entry creation or modification via UI/API * NGCP::Utils::Auth add optional bcrypt_cost support as last argument for generate_salted_hash and get_usr_salted_pass Change-Id: I100c25107d91741d5101bc58d29a3fa558b0b017mr12.5
Kirill Solomko
9 months ago
parent
43d112bd5e
commit
d9f283cbc8
@ -0,0 +1,65 @@
|
|||||||
|
package NGCP::Panel::Utils::Admin;
|
||||||
|
use strict;
|
||||||
|
use warnings;
|
||||||
|
|
||||||
|
use Sipwise::Base;
|
||||||
|
|
||||||
|
use NGCP::Panel::Utils::Generic qw(:all);
|
||||||
|
|
||||||
|
use DBIx::Class::Exception;
|
||||||
|
use NGCP::Panel::Utils::Auth;
|
||||||
|
|
||||||
|
use HTTP::Status qw(:constants);
|
||||||
|
|
||||||
|
sub insert_password_journal {
|
||||||
|
my ($c, $admin, $password) = @_;
|
||||||
|
|
||||||
|
my $bcrypt_cost = 6;
|
||||||
|
my $keep_last_used = $c->config->{security}{password}{web_keep_last_used} // return;
|
||||||
|
|
||||||
|
my $rs = $admin->last_passwords->search({
|
||||||
|
},{
|
||||||
|
order_by => { '-desc' => 'created_at' },
|
||||||
|
});
|
||||||
|
|
||||||
|
my @delete_ids = ();
|
||||||
|
my $idx = 0;
|
||||||
|
foreach my $row ($rs->all) {
|
||||||
|
$idx++;
|
||||||
|
$idx >= $keep_last_used ? push @delete_ids, $row->id : next;
|
||||||
|
}
|
||||||
|
|
||||||
|
my $del_rs = $rs->search({
|
||||||
|
id => { -in => \@delete_ids },
|
||||||
|
});
|
||||||
|
|
||||||
|
$del_rs->delete;
|
||||||
|
|
||||||
|
$admin->last_passwords->create({
|
||||||
|
admin_id => $admin->id,
|
||||||
|
value => NGCP::Panel::Utils::Auth::generate_salted_hash($password, $bcrypt_cost),
|
||||||
|
});
|
||||||
|
$admin->update({ saltedpass_modify_timestamp => \'current_timestamp()' });
|
||||||
|
}
|
||||||
|
|
||||||
|
1;
|
||||||
|
|
||||||
|
=head1 NAME
|
||||||
|
|
||||||
|
NGCP::Panel::Utils::Admin
|
||||||
|
|
||||||
|
=head1 DESCRIPTION
|
||||||
|
|
||||||
|
A temporary helper to manipulate admin data
|
||||||
|
|
||||||
|
=head1 AUTHOR
|
||||||
|
|
||||||
|
Sipwise Development Team <support@sipwise.com>
|
||||||
|
|
||||||
|
=head1 LICENSE
|
||||||
|
|
||||||
|
This library is free software. You can redistribute it and/or modify
|
||||||
|
it under the same terms as Perl itself.
|
||||||
|
|
||||||
|
=cut
|
||||||
|
# vim: set tabstop=4 expandtab:
|
||||||
Loading…
Reference in new issue