/* ************************************************************
$Id: passwordStrength.js,v 1.5 2006/06/22 21:06:44 ryanv Exp $

Created: 20060120
Author:  Steve Moitozo <god at zilla dot us>
Description: This is a quick and dirty password quality meter 
		 written in JavaScript so that the password does 
		 not pass over the network.
License: MIT License (see below)
Modified: 20060620 - added MIT License

---------------------------------------------------------------
Copyright (c) 2006 Steve Moitozo <god at zilla dot us>

Permission is hereby granted, free of charge, to any person 
obtaining a copy of this software and associated documentation 
files (the "Software"), to deal in the Software without 
restriction, including without limitation the rights to use, 
copy, modify, merge, publish, distribute, sublicense, and/or 
sell copies of the Software, and to permit persons to whom the 
Software is furnished to do so, subject to the following 
conditions:

   The above copyright notice and this permission notice shall 
be included in all copies or substantial portions of the 
Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY 
KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE 
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE 
AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT 
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, 
WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING 
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE 
OR OTHER DEALINGS IN THE SOFTWARE. 
---------------------------------------------------------------


Password Strength Factors and Weightings

password length:
level 0 (3 point): less than 4 characters
level 1 (6 points): between 5 and 7 characters
level 2 (12 points): between 8 and 15 characters
level 3 (18 points): 16 or more characters

letters:
level 0 (0 points): no letters
level 1 (5 points): all letters are lower case
level 2 (7 points): letters are mixed case

numbers:
level 0 (0 points): no numbers exist
level 1 (5 points): one number exists
level 1 (7 points): 3 or more numbers exists

special characters:
level 0 (0 points): no special characters
level 1 (5 points): one special character exists
level 2 (10 points): more than one special character exists

combinatons:
level 0 (1 points): letters and numbers exist
level 1 (1 points): mixed case letters
level 1 (2 points): letters, numbers and special characters 
					exist
level 1 (2 points): mixed case letters, numbers and special 
					characters exist

*/

/*
 $Log: passwordStrength.js,v $
 Revision 1.5  2006/06/22 21:06:44  ryanv
 Cutesy password stuff.

 Revision 1.4  2006/06/22 17:09:08  ryanv
 First good version of password strength display bar.

 Revision 1.3  2006/06/21 17:47:28  ryanv
 Checkpoint on the way to a password strength bar.

 Revision 1.2  2006/06/20 20:32:14  ryanv
 Added CVS tokens.

*/


function psDebug(aMsg) {
  setTimeout(function() { throw new Error("[debug] " + aMsg); }, 0);
}

// Returns a numeric score between 0 and 100 representing password strength
function passwordStrength(passwd, username) {
  var intScore   = 0;
  var strLog     = "";

  if (passwd == username)               // Password matches username. Not good.
  {
    intScore = 1;
    return intScore;
  }

  // PASSWORD LENGTH
  if ((passwd.length > 0) && (passwd.length <= 4))        // length 4 or less
  {
    intScore = 2;
    strLog   = strLog + "2 points for length (" + passwd.length + "); ";
  }
  else if ((passwd.length>=5) && (passwd.length<=7))      // length 5 to 7
  {
    intScore = passwd.length / 0.6;
    strLog   = strLog + intScore + " points for length (" + passwd.length + "); ";
  }
  else if ((passwd.length>=8) && (passwd.length<=10))     // length 8 to 10
  {
    intScore = (passwd.length * 1.5) / 0.6;
    strLog   = strLog + intScore + " points for length (" + passwd.length + "); ";
  }
  else if (passwd.length >= 11)                           
  {
    intScore = 25;
    strLog   = strLog + intScore + " points for length (" + passwd.length + "); ";
  } 

  
  if (passwd.match(/[a-z]/))                              // [verified] at least one lower case letter
  {
    intScore = (intScore + 2)
    strLog   = strLog + "2 point for at least one lower case char; "
  }

  if (passwd.match(/[A-Z]/))                              // [verified] at least one upper case letter
  {
    intScore = (intScore + 5)
    strLog   = strLog + "5 point for at least one upper case char; "
  }

  // NUMBERS
  if (passwd.match(/\d+/))                                 // [verified] at least one number
  {
    intScore = (intScore + 5)
    strLog   = strLog + "5 points for at least one number; "
  }

  if (passwd.match(/(.*[0-9].*[0-9].*[0-9])/))             // [verified] at least three numbers
  {
    intScore = (intScore + 13)
    strLog   = strLog + "13 points for at least three numbers; "
  }


  // SPECIAL CHAR
  if (passwd.match(/.[!,@,#,$,%,^,&,*,?,_,~]/))            // [verified] at least one special character
  {
    intScore = (intScore + 8)
    strLog   = strLog + "8 points for at least one special char; "
  }

                              // [verified] at least two special characters
  if (passwd.match(/(.*[!,@,#,$,%,^,&,*,?,_,~].*[!,@,#,$,%,^,&,*,?,_,~])/))
  {
    intScore = (intScore + 11)
    strLog   = strLog + "11 points for at least two special chars; "
  }


  // COMBOS
  if (passwd.match(/([a-z].*[A-Z])|([A-Z].*[a-z])/))        // [verified] both upper and lower case
  {
    intScore = (intScore + 8)
    strLog   = strLog + "8 points for upper and lower combo; "
  }

  if (passwd.match(/(\d.*\D)|(\D.*\d)/))                    // [FAILED] both letters and numbers, almost works because an additional character is required
  {
    intScore = (intScore + 10)
    strLog   = strLog + "10 points for letter and number combo; "
  }

                                // [verified] letters, numbers, and special characters
  if (passwd.match(/([a-zA-Z0-9].*[!,@,#,$,%,^,&,*,?,_,~])|([!,@,#,$,%,^,&,*,?,_,~].*[a-zA-Z0-9])/))
  {
    intScore = (intScore + 13)
    strLog   = strLog + "13 points for letter, number and special char combo; "
  }

//  psDebug(intScore + " : " + strLog);

  return intScore;
}