octave/password-bundle

Symfony4 user password utils

2.2.0 2025-03-13 13:16 UTC

Requires

• php: >=7.1.0
• friendsofsymfony/user-bundle: ^2.0 || ^3.0 || ^4.0
• rollerworks/password-strength-validator: ^1.1
• symfony/framework-bundle: ^3.0 || ^4.0 || ^5.0 || ^6.0
• symfony/orm-pack: *
• symfony/security-bundle: ^4.0 || ^5.0 || ^6.0

MIT

• Igor Lukashov

• password

README

Configuration

Bundle configuration in config/packages/octave_password.yaml:

octave_password:
  redirect_route_name: octave.password.change.password  # Route to redirect for password change
  send_email: true                                      # Enable send email
  mailer_class: App\Service\Mailer                     # Mailer service class
  user_class: App\Entity\User                          # User entity class
  ask_current_password: true                           # Require current password for changes
  reset_password:
    token_lifetime: 60                               # Reset token lifetime in minutes
    resend_interval: 15                              # Minutes between reset requests
  password:
    min_length: 10                                   # Minimum password length
    max_length: 25                                  # Maximum password length
    complexity_level: easy                           # Password complexity level
    expiration_days: 0                               # Password expiration period
    keep_history: no                              # Enable password history
    history_count: 0                                 # Number of passwords to keep

Password Policy Parameters

1. min_length (default: 10)

• Minimum required length for passwords

1. max_length (default: 25)

• Maximum required length for passwords

1. complexity_level (default: easy)

• easy: No specific character requirements
• medium: Must contain mix of letters and numbers
• high: Must contain uppercase letters, lowercase letters, numbers, and special characters

1. expiration_days (default: 0)

• Number of days until password expires
• 0 means passwords never expire

1. keep_history (default: no)

• Whether to track password history

1. history_count (default: 0)

• Number of passwords checked in history