Project

General

Profile

Actions

Defect #1826

closed

Supports special characters in password policy prohibited characters

Added by Ondřej Kopr over 4 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Ondrej Husník
Category:
Password policy
Target version:
Start date:
09/02/2019
Due date:
% Done:

100%

Estimated time:
Affected versions:
Owner:

Description

Please now isn't possible use special characters in prohibited chars.

For example this character base:

ěščřžýáíéúůüöĚŠČŘŽÝÁÍÉŮÚÜÖ+-/\|,<.>/?;:'"\|[{]}`~-_^(),?.:"§!¨'ˇ´=¨

Isn't allowed. After password generation is thrown this error:

java.util.regex.PatternSyntaxException: Dangling meta character '+' near index 0
+
^
    at java.util.regex.Pattern.error(Pattern.java:1955)
    at java.util.regex.Pattern.sequence(Pattern.java:2123)
    at java.util.regex.Pattern.expr(Pattern.java:1996)
    at java.util.regex.Pattern.compile(Pattern.java:1696)
    at java.util.regex.Pattern.<init>(Pattern.java:1351)
    at java.util.regex.Pattern.compile(Pattern.java:1028)
    at java.lang.String.replaceAll(String.java:2223)
    at eu.bcvsolutions.idm.core.api.utils.PasswordGenerator.removeProhibited(PasswordGenerator.java:395)
    at eu.bcvsolutions.idm.core.api.utils.PasswordGenerator.generateRandom(PasswordGenerator.java:121)
    at eu.bcvsolutions.idm.core.model.service.impl.DefaultIdmPasswordPolicyService.generatePassword(DefaultIdmPasswordPolicyService.java:203)
    at eu.bcvsolutions.idm.core.model.service.impl.DefaultIdmPasswordPolicyService.generatePasswordByDefault(DefaultIdmPasswordPolicyService.java:243)
    at eu.bcvsolutions.idm.core.model.service.impl.DefaultIdmPasswordPolicyService$$FastClassBySpringCGLIB$$f90f724f.invoke(<generated>)
    at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
    at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:651)
    at eu.bcvsolutions.idm.core.model.service.impl.DefaultIdmPasswordPolicyService$$EnhancerBySpringCGLIB$$f672d262.generatePasswordByDefault(<generated>)
    at eu.bcvsolutions.idm.core.rest.impl.IdmPasswordPolicyController.generateByDefaultPolicy(IdmPasswordPolicyController.java:238)
    at eu.bcvsolutions.idm.core.rest.impl.IdmPasswordPolicyController$$FastClassBySpringCGLIB$$d8dcb0ff.invoke(<generated>)


Related issues

Related to IdStory Identity Manager - Defect #1350: Provisioning fails on password generation when forbidden characters are added to password policiesClosedOndrej Husník10/25/2018

Actions
Actions

Also available in: Atom PDF