351 lines
13 KiB
C#
351 lines
13 KiB
C#
|
using System;
|
|||
|
|
using System.Linq;
|
|||
|
|
using System.Text.RegularExpressions;
|
|||
|
|
|
|||
|
|
namespace DeviceRepair.Models
|
|||
|
|
{
|
|||
|
|
/// <summary>
|
|||
|
|
/// 密码策略对象
|
|||
|
|
/// (目前没有存入后台数据库，目前基于客户端判断)
|
|||
|
|
/// </summary>
|
|||
|
|
public class PasswordStrategy
|
|||
|
|
{
|
|||
|
|
private static PasswordStrategy manager;
|
|||
|
|
public static PasswordStrategy Instance
|
|||
|
|
{
|
|||
|
|
get
|
|||
|
|
{
|
|||
|
|
if (manager == null)
|
|||
|
|
manager = new PasswordStrategy();
|
|||
|
|
return manager;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
#region Fields & Property
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 默认的特殊字符集
|
|||
|
|
/// </summary>
|
|||
|
|
private char[] DefaultSpecialCharacters = new char[]
|
|||
|
|
{
|
|||
|
|
'~','`','!','@','#','$','%','^','&','*','(',')','-','_','+','-','[',']','{','}','|','\\',':',';','"','\'','<','>','.','/','?'
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 最小密码长度
|
|||
|
|
/// </summary>
|
|||
|
|
public int PasswordMinLength
|
|||
|
|
{
|
|||
|
|
get;
|
|||
|
|
set;
|
|||
|
|
}
|
|||
|
|
/// <summary>
|
|||
|
|
/// 密码策略类型
|
|||
|
|
/// </summary>
|
|||
|
|
public PasswordStrategyType StrategyType
|
|||
|
|
{
|
|||
|
|
get;
|
|||
|
|
set;
|
|||
|
|
}
|
|||
|
|
/// <summary>
|
|||
|
|
/// 最小密码策略组合类型种类
|
|||
|
|
/// </summary>
|
|||
|
|
public int MinPasswordStrategyTypeCounts
|
|||
|
|
{
|
|||
|
|
get;
|
|||
|
|
set;
|
|||
|
|
}
|
|||
|
|
/// <summary>
|
|||
|
|
/// 密码有效期限
|
|||
|
|
/// （以天为单位）
|
|||
|
|
/// </summary>
|
|||
|
|
public int PasswordValidDays
|
|||
|
|
{
|
|||
|
|
get; set;
|
|||
|
|
}
|
|||
|
|
/// <summary>
|
|||
|
|
/// 密码错误连续重试次数
|
|||
|
|
/// （超过连续重试次数后，账号将被锁定）
|
|||
|
|
/// </summary>
|
|||
|
|
public int PasswordContinueRetryCounts
|
|||
|
|
{
|
|||
|
|
get; set;
|
|||
|
|
}
|
|||
|
|
/// <summary>
|
|||
|
|
/// 密码修改不允许重复的次数
|
|||
|
|
/// （默认：连续5次密码修改不允许相同）
|
|||
|
|
/// </summary>
|
|||
|
|
public int PasswordAlterUnRepeatCounts
|
|||
|
|
{
|
|||
|
|
get; set;
|
|||
|
|
}
|
|||
|
|
/// <summary>
|
|||
|
|
/// 系统允许的屏幕最大闲置时间（以分钟为单位）
|
|||
|
|
/// （超过规定时间，系统屏幕将被锁定，需要账号登陆解锁屏幕）
|
|||
|
|
/// </summary>
|
|||
|
|
public int ScreenLockTimes
|
|||
|
|
{
|
|||
|
|
get; set;
|
|||
|
|
}
|
|||
|
|
#endregion
|
|||
|
|
|
|||
|
|
#region Ctor
|
|||
|
|
|
|||
|
|
public PasswordStrategy(PasswordStrategyType strategyType = PasswordStrategyType.UpperCaseLetter | PasswordStrategyType.LowerCaseLetter | PasswordStrategyType.Number | PasswordStrategyType.SpecialCharacter,
|
|||
|
|
int passwordMinLength = 8, int minPasswordStrategyTypeCounts = 3, int passwordValidDays = 90, int passwordContinueRetryCounts = 5,
|
|||
|
|
int passwordAlterUnRepeatCounts = 5, int screenLockTimes = 15)
|
|||
|
|
{
|
|||
|
|
StrategyType = strategyType;
|
|||
|
|
PasswordMinLength = passwordMinLength;
|
|||
|
|
MinPasswordStrategyTypeCounts = minPasswordStrategyTypeCounts;
|
|||
|
|
PasswordValidDays = passwordValidDays;
|
|||
|
|
PasswordContinueRetryCounts = passwordContinueRetryCounts;
|
|||
|
|
PasswordAlterUnRepeatCounts = passwordAlterUnRepeatCounts;
|
|||
|
|
ScreenLockTimes = screenLockTimes;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
#endregion
|
|||
|
|
|
|||
|
|
#region Methods
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 密码校验
|
|||
|
|
/// </summary>
|
|||
|
|
/// <param name="password"></param>
|
|||
|
|
/// <param name="msg"></param>
|
|||
|
|
/// <returns></returns>
|
|||
|
|
public bool Validate(string password, out string msg)
|
|||
|
|
{
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
msg = "密码校验成功！";
|
|||
|
|
|
|||
|
|
if (string.IsNullOrEmpty(password))
|
|||
|
|
{
|
|||
|
|
msg = "密码为空！";
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
if (password.Length < PasswordMinLength)
|
|||
|
|
{
|
|||
|
|
msg = $"密码至少位{PasswordMinLength}位！";
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
#region 校验密码强度
|
|||
|
|
int iCurrentPasswordIntensity = 0;
|
|||
|
|
|
|||
|
|
if ((StrategyType & PasswordStrategyType.UpperCaseLetter) != 0)
|
|||
|
|
{
|
|||
|
|
//策略中要求大写字母验证
|
|||
|
|
if (CheckCharacter(password, PasswordStrategyType.UpperCaseLetter))
|
|||
|
|
{
|
|||
|
|
iCurrentPasswordIntensity++;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
if ((StrategyType & PasswordStrategyType.LowerCaseLetter) != 0)
|
|||
|
|
{
|
|||
|
|
//策略中要求小写字母验证
|
|||
|
|
if (CheckCharacter(password, PasswordStrategyType.LowerCaseLetter))
|
|||
|
|
{
|
|||
|
|
iCurrentPasswordIntensity++;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
if ((StrategyType & PasswordStrategyType.Number) != 0)
|
|||
|
|
{
|
|||
|
|
//策略中要求数字验证
|
|||
|
|
if (CheckCharacter(password, PasswordStrategyType.Number))
|
|||
|
|
{
|
|||
|
|
iCurrentPasswordIntensity++;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
if ((StrategyType & PasswordStrategyType.SpecialCharacter) != 0)
|
|||
|
|
{
|
|||
|
|
//策略中要求特殊字符验证
|
|||
|
|
if (CheckCharacter(password, PasswordStrategyType.SpecialCharacter))
|
|||
|
|
{
|
|||
|
|
iCurrentPasswordIntensity++;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
if (iCurrentPasswordIntensity < MinPasswordStrategyTypeCounts)
|
|||
|
|
{
|
|||
|
|
msg = $"密码不合符密码强度策略（大写字母/小写字母/数字/特殊字符中最好满足其中{MinPasswordStrategyTypeCounts}种）！";
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
#endregion
|
|||
|
|
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
catch (Exception ex)
|
|||
|
|
{
|
|||
|
|
throw new Exception($"密码校验时发生异常：{ex.Message}");
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 校验密码是否符合单一密码策略
|
|||
|
|
/// </summary>
|
|||
|
|
/// <param name="password"></param>
|
|||
|
|
/// <param name="strategyType"></param>
|
|||
|
|
/// <returns></returns>
|
|||
|
|
private bool CheckCharacter(string password, PasswordStrategyType strategyType)
|
|||
|
|
{
|
|||
|
|
string regexExpresion = string.Empty;
|
|||
|
|
switch (strategyType)
|
|||
|
|
{
|
|||
|
|
case PasswordStrategyType.UpperCaseLetter:
|
|||
|
|
regexExpresion = "[A-Z]";
|
|||
|
|
break;
|
|||
|
|
case PasswordStrategyType.LowerCaseLetter:
|
|||
|
|
regexExpresion = "[a-z]";
|
|||
|
|
break;
|
|||
|
|
case PasswordStrategyType.Number:
|
|||
|
|
regexExpresion = "[0-9]";
|
|||
|
|
break;
|
|||
|
|
case PasswordStrategyType.SpecialCharacter:
|
|||
|
|
if ((password.Where(A => { return DefaultSpecialCharacters.Contains(A); })?.Count() ?? 0) > 0)
|
|||
|
|
{
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
else
|
|||
|
|
{
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
default:
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
return Regex.IsMatch(password, regexExpresion);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
#region 随机产生符合当前密码策略的密码
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 随机产生符合当前密码策略的密码
|
|||
|
|
/// </summary>
|
|||
|
|
/// <returns></returns>
|
|||
|
|
public string GenRandomPassword()
|
|||
|
|
{
|
|||
|
|
string vPwdTmp = string.Empty;
|
|||
|
|
if ((StrategyType & PasswordStrategyType.UpperCaseLetter) != 0)
|
|||
|
|
{
|
|||
|
|
vPwdTmp += GetRandomCharByStrategy(PasswordStrategyType.UpperCaseLetter, (new Random(~unchecked((int)DateTime.Now.Ticks))).Next(3, 5));
|
|||
|
|
}
|
|||
|
|
if ((StrategyType & PasswordStrategyType.LowerCaseLetter) != 0)
|
|||
|
|
{
|
|||
|
|
vPwdTmp += GetRandomCharByStrategy(PasswordStrategyType.LowerCaseLetter, (new Random(~unchecked((int)DateTime.Now.Ticks))).Next(3, 5));
|
|||
|
|
}
|
|||
|
|
if ((StrategyType & PasswordStrategyType.Number) != 0)
|
|||
|
|
{
|
|||
|
|
vPwdTmp += GetRandomCharByStrategy(PasswordStrategyType.Number, (new Random(~unchecked((int)DateTime.Now.Ticks))).Next(3, 5));
|
|||
|
|
}
|
|||
|
|
if ((StrategyType & PasswordStrategyType.SpecialCharacter) != 0)
|
|||
|
|
{
|
|||
|
|
vPwdTmp += GetRandomCharByStrategy(PasswordStrategyType.SpecialCharacter, (new Random(~unchecked((int)DateTime.Now.Ticks))).Next(3, 5));
|
|||
|
|
}
|
|||
|
|
if (vPwdTmp.Length < PasswordMinLength)
|
|||
|
|
{
|
|||
|
|
vPwdTmp += RandomString.GetRandomString(PasswordMinLength - vPwdTmp.Length,
|
|||
|
|
((StrategyType & PasswordStrategyType.Number) != 0), ((StrategyType & PasswordStrategyType.LowerCaseLetter) != 0),
|
|||
|
|
((StrategyType & PasswordStrategyType.UpperCaseLetter) != 0),
|
|||
|
|
((StrategyType & PasswordStrategyType.SpecialCharacter) != 0));
|
|||
|
|
}
|
|||
|
|
return RandomString.RandomChangeStringSequence(vPwdTmp);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 按照密码策略随机产生指定位数的字符
|
|||
|
|
/// </summary>
|
|||
|
|
/// <param name="pwdStrategyType">密码策略</param>
|
|||
|
|
/// <param name="iRandomLength">随机位数</param>
|
|||
|
|
/// <returns></returns>
|
|||
|
|
private string GetRandomCharByStrategy(PasswordStrategyType pwdStrategyType, int iRandomLength)
|
|||
|
|
{
|
|||
|
|
string vRandStrPwd = string.Empty;
|
|||
|
|
switch (pwdStrategyType)
|
|||
|
|
{
|
|||
|
|
case PasswordStrategyType.UpperCaseLetter:
|
|||
|
|
vRandStrPwd = GenerateRandomLetter(iRandomLength);
|
|||
|
|
break;
|
|||
|
|
case PasswordStrategyType.LowerCaseLetter:
|
|||
|
|
vRandStrPwd = GenerateRandomLetter(iRandomLength, true);
|
|||
|
|
break;
|
|||
|
|
case PasswordStrategyType.Number:
|
|||
|
|
vRandStrPwd = GenerateCheckCodeNum(iRandomLength);
|
|||
|
|
break;
|
|||
|
|
case PasswordStrategyType.SpecialCharacter:
|
|||
|
|
vRandStrPwd = GenerateRandomSpecialCharacter(iRandomLength);
|
|||
|
|
break;
|
|||
|
|
default:
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
return vRandStrPwd;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 随机生成字母
|
|||
|
|
/// </summary>
|
|||
|
|
/// <param name="iRandomLength">生成长度</param>
|
|||
|
|
/// <param name="bLower">是否小写字母</param>
|
|||
|
|
/// <returns></returns>
|
|||
|
|
private string GenerateRandomLetter(int iRandomLength, bool bLower = false)
|
|||
|
|
{
|
|||
|
|
char[] Pattern = new char[] { 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P', 'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X', 'Y', 'Z' };
|
|||
|
|
if (bLower)
|
|||
|
|
{
|
|||
|
|
Pattern = new char[] { 'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z' };
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
string result = "";
|
|||
|
|
int n = Pattern.Length;
|
|||
|
|
Random random = new Random(~unchecked((int)DateTime.Now.Ticks));
|
|||
|
|
for (int i = 0; i < iRandomLength; i++)
|
|||
|
|
{
|
|||
|
|
int rnd = random.Next(0, n);
|
|||
|
|
result += Pattern[rnd];
|
|||
|
|
}
|
|||
|
|
return result;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 随机生成数字
|
|||
|
|
/// </summary>
|
|||
|
|
/// <param name="iRandomLength"></param>
|
|||
|
|
/// <returns></returns>
|
|||
|
|
private string GenerateCheckCodeNum(int iRandomLength)
|
|||
|
|
{
|
|||
|
|
int rep = 0;
|
|||
|
|
string str = string.Empty;
|
|||
|
|
long num2 = DateTime.Now.Ticks + rep;
|
|||
|
|
rep++;
|
|||
|
|
Random random = new Random(((int)(((ulong)num2) & 0xffffffffL)) | ((int)(num2 >> rep)));
|
|||
|
|
for (int i = 0; i < iRandomLength; i++)
|
|||
|
|
{
|
|||
|
|
int num = random.Next();
|
|||
|
|
str = str + ((char)(0x30 + ((ushort)(num % 10)))).ToString();
|
|||
|
|
}
|
|||
|
|
return str;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 随机生成特殊字符
|
|||
|
|
/// </summary>
|
|||
|
|
/// <param name="iRandomLength">生成长度</param>
|
|||
|
|
/// <returns></returns>
|
|||
|
|
private string GenerateRandomSpecialCharacter(int iRandomLength)
|
|||
|
|
{
|
|||
|
|
string result = "";
|
|||
|
|
int n = DefaultSpecialCharacters.Length;
|
|||
|
|
Random random = new Random(~unchecked((int)DateTime.Now.Ticks));
|
|||
|
|
for (int i = 0; i < iRandomLength; i++)
|
|||
|
|
{
|
|||
|
|
int rnd = random.Next(0, n);
|
|||
|
|
result += DefaultSpecialCharacters[rnd];
|
|||
|
|
}
|
|||
|
|
return result;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
#endregion
|
|||
|
|
|
|||
|
|
#endregion
|
|||
|
|
}
|
|||
|
|
}
|