security_password_policy_generator

Added value: +false

Added value: +false

Added value: +"Policy constraints (required when operation is generate; ignored for presets)."

Added value: +{
+  "description": "Free-form extra rules appended to the policy document.",
+  "items": {
+    "type": "string"
+  },
+  "type": "array"
+}

Added value: +true

Added value: +"Mention common-password-list screening in the policy (defaults to true unless set false)."

Added value: +{
+  "description": "Mention dictionary-word screening in the policy.",
+  "type": "boolean"
+}

Added value: +{
+  "description": "Substrings that must not appear in the password (case-insensitive).",
+  "items": {
+    "type": "string"
+  },
+  "type": "array"
+}

Added value: +{
+  "description": "Lockout duration in minutes after the threshold is reached.",
+  "minimum": 1,
+  "type": "integer"
+}

Added value: +{
+  "description": "Failed-attempt count before account lockout.",
+  "minimum": 1,
+  "type": "integer"
+}

Added value: +{
+  "description": "Maximum password length; applied only when greater than or equal to minLength.",
+  "minimum": 1,
+  "type": "integer"
+}

Added value: +{
+  "description": "Reject runs of the same character longer than N (such as aaa).",
+  "minimum": 1,
+  "type": "integer"
+}

Added value: +"State that multi-factor authentication is required."

Added value: +"Minimum password length; required positive integer. Below 12 emits a NIST warning, below 8 a hard-fail warning."

Added value: +1

Added value: +"Require at least one 0-9 digit."

Added value: +"Require at least one lowercase a-z character."

Added value: +"Require at least one symbol from the symbol set."

Added value: +"Require at least one uppercase A-Z character."

Added value: +{
+  "description": "Mandatory rotation interval in days; 0 or omitted means no rotation.",
+  "minimum": 0,
+  "type": "integer"
+}

Added value: +{
+  "description": "Authenticated-session inactivity timeout in minutes.",
+  "minimum": 1,
+  "type": "integer"
+}

Added value: +{
+  "description": "Override the symbol set used by the regex and JS validator. Defaults to a standard punctuation set.",
+  "type": "string"
+}

Previous value: -[
-  "minLength",
-  "requireUppercase",
-  "requireLowercase",
-  "requireDigit",
-  "requireSymbol",
-  "disallowCommonPasswords",
-  "mfaRequired"
-]New value: +[
+  "minLength"
+]

Added value: +"generate"

Added value: +"generate builds a policy from the input object; presets ignores input and returns the 8 built-in compliance baselines."

Added value: +[
+  "generate",
+  "presets"
+]

Previous value: -[
-  "operation",
-  "input"
-]New value: +[
+  "operation"
+]

Previous value: -nullNew value: +{
+  "properties": {
+    "operation": {
+      "description": "The operation performed (generate or presets).",
+      "type": "string"
+    },
+    "result": {
+      "description": "For generate, the policy artifacts; for presets, a presets array.",
+      "properties": {
+        "configSnippets": {
+          "description": "Platform-specific validator snippets.",
+          "properties": {
+            "activeDirectory": {
+              "description": "Active Directory fine-grained password policy snippet.",
+              "type": "string"
+            },
+            "htpasswd": {
+              "description": "Apache htpasswd guidance snippet.",
+              "type": "string"
+            },
+            "javascript": {
+              "description": "JavaScript validatePassword function.",
+              "type": "string"
+            },
+            "k8sValidator": {
+              "description": "Kubernetes admission validator snippet.",
+              "type": "string"
+            },
+            "nginx": {
+              "description": "nginx or Lua validation snippet.",
+              "type": "string"
+            },
+            "python": {
+              "description": "Python validation function.",
+              "type": "string"
+            }
+          },
+          "type": "object"
+        },
+        "entropy": {
+          "description": "Worst-case (uniform) entropy estimate for the minimum-length password.",
+          "properties": {
+            "breakdownByClass": {
+              "description": "Per-character-class alphabet sizes contributing to entropy.",
+              "items": {
+                "description": "A character-class contribution entry.",
+                "type": "object"
+              },
+              "type": "array"
+            },
+            "classification": {
+              "description": "Bucket: weak, adequate, strong, or overkill.",
+              "type": "string"
+            },
+            "minEntropyBits": {
+              "description": "Worst-case entropy in bits at minLength.",
+              "type": "number"
+            }
+          },
+          "type": "object"
+        },
+        "html": {
+          "description": "The same policy rendered to HTML.",
+          "type": "string"
+        },
+        "jsonSchema": {
+          "description": "A JSON Schema fragment validating a password string.",
+          "type": "object"
+        },
+        "markdown": {
+          "description": "The password policy as a Markdown document.",
+          "type": "string"
+        },
+        "presets": {
+          "description": "For operation presets: the 8 built-in baseline definitions (id, name, description, input).",
+          "items": {
+            "description": "A built-in compliance baseline.",
+            "type": "object"
+          },
+          "type": "array"
+        },
+        "regex": {
+          "description": "A single regular expression enforcing the constraints.",
+          "type": "string"
+        },
+        "warnings": {
+          "description": "Compliance and security warnings about the chosen constraints.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "type": "object"
+    },
+    "success": {
+      "description": "Whether the request succeeded.",
+      "type": "boolean"
+    }
+  },
+  "type": "object"
+}