implement JS password scoring, td_stock approve logicc

2026-04-30 15:14:42 +07:00
parent db5c47b6ca
commit ac4fd9a5ad
3147 changed files with 1298 additions and 343 deletions
@@ -0,0 +1,90 @@
+<?php
+
+declare(strict_types=1);
+
+namespace ZxcvbnPhp;
+
+/**
+ * The main entry point.
+ *
+ * @see  zxcvbn/src/main.coffee
+ */
+class Zxcvbn
+{
+    /**
+     * @var
+     */
+    protected $matcher;
+
+    /**
+     * @var
+     */
+    protected $scorer;
+
+    /**
+     * @var
+     */
+    protected $timeEstimator;
+
+    /**
+     * @var
+     */
+    protected $feedback;
+
+    public function __construct()
+    {
+        $this->matcher = new \ZxcvbnPhp\Matcher();
+        $this->scorer = new \ZxcvbnPhp\Scorer();
+        $this->timeEstimator = new \ZxcvbnPhp\TimeEstimator();
+        $this->feedback = new \ZxcvbnPhp\Feedback();
+    }
+
+    public function addMatcher(string $className): self
+    {
+        $this->matcher->addMatcher($className);
+
+        return $this;
+    }
+
+    /**
+     * Calculate password strength via non-overlapping minimum entropy patterns.
+     *
+     * @param string $password   Password to measure
+     * @param array  $userInputs Optional user inputs
+     *
+     * @return array Strength result array with keys:
+     *               password
+     *               entropy
+     *               match_sequence
+     *               score
+     */
+    public function passwordStrength(string $password, array $userInputs = []): array
+    {
+        $timeStart = microtime(true);
+
+        $sanitizedInputs = array_map(
+            function ($input) {
+                return mb_strtolower((string) $input);
+            },
+            $userInputs
+        );
+
+        // Get matches for $password.
+        // Although the coffeescript upstream sets $sanitizedInputs as a property,
+        // doing this immutably makes more sense and is a bit easier
+        $matches = $this->matcher->getMatches($password, $sanitizedInputs);
+
+        $result = $this->scorer->getMostGuessableMatchSequence($password, $matches);
+        $attackTimes = $this->timeEstimator->estimateAttackTimes($result['guesses']);
+        $feedback = $this->feedback->getFeedback($attackTimes['score'], $result['sequence']);
+
+        return array_merge(
+            $result,
+            $attackTimes,
+            [
+                'feedback'  => $feedback,
+                'calc_time' => microtime(true) - $timeStart
+            ]
+        );
+    }
+}