test/password_security/static/src/js/password_gauge.js

//  Copyright 2018 Modoolar <info@modoolar.com>
//  License LGPL-3.0 or later (http://www.gnu.org/licenses/lgpl.html).
odoo.define("password_security.policy", function (require) {
    "use strict";

    var core = require("web.core");
    var _t = core._t;
    var auth_password_policy = require("auth_password_policy");
    var Policy = auth_password_policy.Policy;
    var zxcvbn = window.zxcvbn;

    Policy.include({
        /**
         *
         * @param {Object} info
         * @param {Number} [info.password_length=4]
         * @param {Number} [info.password_lower]
         * @param {Number} [info.password_upper]
         * @param {Number} [info.password_numeric]
         * @param {Number} [info.password_special]
         * @param {Number} [info.password_estimate=3]
         */
        init: function (info) {
            this._super(info);

            this._password_length = info.password_length || 4;
            this._password_lower = info.password_lower;
            this._password_upper = info.password_upper;
            this._password_numeric = info.password_numeric;
            this._password_special = info.password_special;
            this._password_estimate = info.password_estimate || 3;
        },

        toString: function () {
            var msgs = [];

            if (this._password_length > 0) {
                msgs.push(
                    _.str.sprintf(_t("at least %d characters"), this._password_length)
                );
            }

            if (this._password_lower > 0) {
                msgs.push(
                    _.str.sprintf(
                        _t("at least %d lower case characters"),
                        this._password_lower
                    )
                );
            }

            if (this._password_upper > 0) {
                msgs.push(
                    _.str.sprintf(
                        _t("at least %d upper case characters"),
                        this._password_upper
                    )
                );
            }

            if (this._password_numeric > 0) {
                msgs.push(
                    _.str.sprintf(
                        _t("at least %d numeric characters"),
                        this._password_numeric
                    )
                );
            }

            if (this._password_special > 0) {
                msgs.push(
                    _.str.sprintf(
                        _t("at least %d special characters"),
                        this._password_special
                    )
                );
            }
            return msgs.join(", ");
        },

        _calculate_password_score: function (pattern, min_count, password) {
            if (!min_count) {
                return 1.0;
            }

            var matchMinCount = new RegExp(
                "(.*" + pattern + ".*){" + min_count + ",}",
                "g"
            ).exec(password);
            if (matchMinCount === null) {
                return 0;
            }

            var count = 0;
            var regExp = new RegExp(pattern, "g");

            while (regExp.exec(password) !== null) {
                count++;
            }

            return Math.min(count / min_count, 1.0);
        },

        _estimate: function (password) {
            return Math.min(zxcvbn(password).score / 4.0, 1.0);
        },

        score: function (password) {
            var lengthscore = Math.min(password.length / this._password_length, 1.0);
            var loverscore = this._calculate_password_score(
                "[a-z]",
                this._password_lower,
                password
            );
            var upperscore = this._calculate_password_score(
                "[A-Z]",
                this._password_upper,
                password
            );
            var numericscore = this._calculate_password_score(
                "\\d",
                this._password_numeric,
                password
            );
            var specialscore = this._calculate_password_score(
                "[\\W_]",
                this._password_special,
                password
            );
            var estimatescore = this._estimate(password);

            return (
                lengthscore *
                loverscore *
                upperscore *
                numericscore *
                specialscore *
                estimatescore
            );
        },
    });

    var recommendations = {
        score: auth_password_policy.recommendations.score,
        policies: [
            new Policy({
                password_length: 12,
                password_upper: 3,
                password_lower: 3,
                password_numeric: 3,
                password_special: 3,
                password_estimate: 3,
            }),
            new Policy({
                password_length: 16,
                password_upper: 4,
                password_lower: 4,
                password_numeric: 4,
                password_special: 4,
                password_estimate: 4,
            }),
        ],
    };

    auth_password_policy.recommendations = recommendations;
});