password_generator.cpp

Go to the documentation of this file.

 
#include "security/password_generator.h"
 
#include "errors/exceptions.h"
#include "memory/memory.h"
#include "utility/countof.h"
 
#include <cassert>
 
namespace CppSecurity {
 
PasswordGenerator::PasswordGenerator(size_t length, PasswordFlags flags)
    : _length(length), _flags(flags)
{
    assert((length >= 6) && "Password should be at least 6 bytes!");
    if (length < 6)
        throwex CppCommon::SecurityException("Invalid password length!");
}
 
std::password PasswordGenerator::Generate() const
{
    char lower[] = "abcdefghijklmnopqrstuvwxyz";
    char upper[] = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
    char digits[] = "012345678901234567890123456789";
    char symbols[] = "!\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~";
 
    std::string cache;
    if ((flags() & PasswordFlags::lower) != 0)
        cache += lower;
    if ((flags() & PasswordFlags::upper) != 0)
        cache += upper;
    if ((flags() & PasswordFlags::digits) != 0)
        cache += digits;
    if ((flags() & PasswordFlags::symbols) != 0)
        cache += symbols;
 
    size_t offset = 0;
    std::password result(length(), 0);
    CppCommon::Memory::CryptoFill(result.data(), result.size());
 
    if ((flags() & PasswordFlags::lower) != 0)
        result[offset] = lower[result[offset] % (CppCommon::countof(lower) - 1)], ++offset;
    if ((flags() & PasswordFlags::upper) != 0)
        result[offset] = upper[result[offset] % (CppCommon::countof(upper) - 1)], ++offset;
    if ((flags() & PasswordFlags::digits) != 0)
        result[offset] = digits[result[offset] % (CppCommon::countof(digits) - 1)], ++offset;
    if ((flags() & PasswordFlags::symbols) != 0)
        result[offset] = symbols[result[offset] % (CppCommon::countof(symbols) - 1)], ++offset;
 
    for (size_t i = offset; i < length(); ++i)
        result[i] = cache[result[i] % cache.size()];
 
    return result;
}
 
bool PasswordGenerator::Validate(std::string_view password) const
{
    // Validate password length requirement
    if (password.size() < length())
        return false;
 
    // Collect password flags requirements
    bool lower = false;
    bool upper = false;
    bool digits = false;
    bool symbols = false;
    for (size_t i = 0; i < password.size(); ++i)
    {
        if ((password[i] >= 'a') && (password[i] <= 'z'))
            lower = true;
        else if ((password[i] >= 'A') && (password[i] <= 'Z'))
            upper = true;
        else if ((password[i] >= '0') && (password[i] <= '9'))
            digits = true;
        else if ((password[i] == '!') || (password[i] == '"') || (password[i] == '#') || (password[i] == '$') || (password[i] == '%') ||
                 (password[i] == '&') || (password[i] == '\'') || (password[i] == '(') || (password[i] == ')') || (password[i] == '*') ||
                 (password[i] == '+') ||(password[i] == ',') || (password[i] == '-') || (password[i] == '.') || (password[i] == '/') ||
                 (password[i] == ':') || (password[i] == ';') || (password[i] == '<') || (password[i] == '=') || (password[i] == '>') ||
                 (password[i] == '?') || (password[i] == '@') || (password[i] == '[') || (password[i] == '\\') || (password[i] == ']') ||
                 (password[i] == '^') || (password[i] == '_') || (password[i] == '`') || (password[i] == '{') || (password[i] == '|') ||
                 (password[i] == '}') || (password[i] == '~'))
            symbols = true;
        else
            return false;
    }
 
    // Validate password flags requirements
    if (!lower && ((flags() & PasswordFlags::lower) != 0))
        return false;
    if (!upper && ((flags() & PasswordFlags::upper) != 0))
        return false;
    if (!digits && ((flags() & PasswordFlags::digits) != 0))
        return false;
    if (!symbols && ((flags() & PasswordFlags::symbols) != 0))
        return false;
 
    return true;
}
 
} // namespace CppSecurity