密码生成器，如何使其返回足够强的密码

Question

I created a simple password generator that is also strength check capable. However, I struggle to decide how it should behave if it fails to generate a strong enough password. At this point, it just displays a creation failure message.

Should I define the password creation rules or just make the function re-launch if the password created is not strong enough? Any remarks, suggestions or leads are appreciated. Thanks.

The code can be found below.

'use strict'; 


let generatePassword = function(passwordLength = 10) {

  let alphabetString = "QWERTYUIOPASDFGHJKLZXCVBNMqwertyuiopasdfghjklzxcvbnm1234567890-_=+[]{}!@#$%^&*();:'|\,<.>/?`",
  alphabet = alphabetString.split("",),
  passwordArray = [],

  getRandomSymbol = function() {
    return alphabet[Math.floor(Math.random()*alphabet.length)]
  };

  for (let i = 0; i < passwordLength; i++) {
    passwordArray.push(getRandomSymbol());
  } 

  let password = passwordArray.join(""),
  passwordStrengthCheck = new RegExp("^(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[!@#\$%\^&\*])(?=.{8,})");

  if (password.match(passwordStrengthCheck)) {
    return console.log(`Your password is: ${password}`);
  } else {
    console.log("Failed to generate a strong enough password");
  }
}


// Function call sample:

generatePassword();  

Answer 1

To ensure that your password has at least one symbol of all groups, do like that:

1. Pick random char from each group (1 from Capiltal letters, 1 from small, 1 digit ....)
2. Pick rest chars from all
3. Shuffle picked chars

code:

let generatePassword = function(passwordLength = 10) {

  let capitals = "QWERTYUIOPASDFGHJKLZXCVBNM";
  let small = "qwertyuiopasdfghjklzxcvbnm";
  let digits = "1234567890";
  let symbols = "-_=+[]{}!@#$%^&*();:'|\,<.>/?`",
  let all = capitals + small + digits + symbols;


  getRandomSymbol = function(sourceString) {
    return sourceString[Math.floor(Math.random()*sourceString.length)]
  };


  alphabet = alphabetString.split("",),
  passwordArray = [],

  passwordArray.push(getRandomSymbol(capitals));
  passwordArray.push(getRandomSymbol(small));
  passwordArray.push(getRandomSymbol(digits));
  passwordArray.push(getRandomSymbol(symbols));



  for (let i = 0; i < passwordLength - 4; i++) {
    passwordArray.push(getRandomSymbol(all));
  } 


  shuffle = function (a) {
    for (let i = a.length - 1; i > 0; i--) {
        const j = Math.floor(Math.random() * (i + 1));
        [a[i], a[j]] = [a[j], a[i]];
    }
    return a;
  }

  let password = shuffle(passwordArray).join(""),

  passwordStrengthCheck = new RegExp("^(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[!@#\$%\^&\*])(?=.{8,})");

  if (password.match(passwordStrengthCheck)) {
    return console.log(`Your password is: ${password}`);
  } else {
    console.log("Failed to generate a strong enough password");
  }
}