无法在 Ruby on Rails 中执行密码复杂性实现？

Question

我对此主题进行了很多研究，但由于某种原因，我无法在我的 Ruby on Rails Web 应用程序上执行密码复杂性实现。我已经安装了设计 gem 并关注了 Best flexible rails password security implementation 和 How to validate password strength with Devise in Ruby on Rails?。

当我在线查看时，我的正则表达式似乎正在工作

/\A(?=.{8,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[[:^alnum:]])/x

但是一旦我在我的 user.rb 中实现它，它就不起作用了。

我的 user.rb 文件：

#Active Record for Users
class User < ActiveRecord::Base
  belongs_to :entity
  has_and_belongs_to_many :groups, :join_table => "users_groups"
  has_many :surveys, inverse_of: :user
  has_many :results, inverse_of: :user

  validates :password, :firstName, :email, :salt, :role, :timezone, presence: true
  validates :email, :uniqueness => {:scope => :entity_id}
  validates_format_of :email, :with => /.+@.+\..+/i

  devise :database_authenticatable, :validatable
  validate :password_complexity

  #User Authentication
  def self.authenticate(email="", lpassword="")
    users = User.where(email: email)
    results = []
    users.each do |user|
      if user && user.match_password(lpassword)
      results.push(user)
      end
    end
    if(results.length == 0)
    return false
    else
    return results
    end
  end

  #Password Check
  def match_password(lpassword="")
        return (BCrypt::Password.new(password).is_password?(lpassword+salt))
    end

  #Password Authentication
  def password_complexity
      if password.present? and not password.match(/\A(?=.{8,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[[:^alnum:]])/x)
        errors.add :password, "must include at least one lowercase letter, one uppercase letter, and one digit"
      end
   end

end

Answer 1

你所做的应该有效，但为什么不简单地这样做

validates :password, format: { with: /\A(?=.{8,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[[:^alnum:]])/, message: "must include at least one lowercase letter, one uppercase letter, and one digit" }