password requirement

Author: dshao

pegr/grails-app/controllers/pegr/UserController.groovy

@@ -186,7 +186,7 @@ class PasswordRegistrationCommand implements grails.validation.Validateable {
 	String passwordRepeat
 
 	static constraints = {
-		password(size: 5..20, blank: false)
+		password(blank: false, matches: '^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$%^&*-_]).{8,}$')
 		passwordRepeat nullable: false,
 		   validator: { passwd2, urc ->
 			   return passwd2 == urc.password ?: 'validation.reenterSamePassword'

pegr/grails-app/views/user/resetPassword.gsp

@@ -7,6 +7,14 @@
             <g:if test="${request.message}">
                 <div class="alert alert-danger">${request.message}</div>
             </g:if>
+            <p>The password should have</p>
+            <ol>
+                <li>minimum eight characters</li>
+                <li>at least one upper case English letter</li>
+                <li>at least one lower case English letter</li>
+                <li>at least one digit</li>
+                <li>at least one special character, such as #?!@$%^&*-_</li>
+            </ol>  
             <g:form controller="user" action="resetPassword" class="fields">
                 <input type="hidden" name="token" value="${token}">
                 <div>

pegr/grails-app/views/user/updatePassword.gsp

@@ -7,7 +7,14 @@
     <h2>Profile</h2>
     <div class="profile">
         <h3>Change Password</h3>  
-        <p>The password should have 5-20 characters.</p>
+        <p>The password should have</p>
+        <ol>
+            <li>minimum eight characters</li>
+            <li>at least one upper case English letter</li>
+            <li>at least one lower case English letter</li>
+            <li>at least one digit</li>
+            <li>at least one special character, such as #?!@$%^&*-</li>
+        </ol>        
         <g:hasErrors bean="${user}">
             <div class="errors">
                 <g:renderErrors bean="${user}" as="list"/>