Java密码校验：如何编写含全量特殊字符与0-9数字的校验字符串？

Hey there, let's get your password validation code working correctly! I spot two big issues in your current implementation that are causing the checks to fail, plus some small tweaks to make it more robust.

The Core Problems in Your Current Code #

1. String.contains() doesn't handle regex — This method only checks if a literal substring exists in your password, not if it matches a regular expression. You need to use String.matches() or precompiled Pattern objects for regex validation.
2. Broken special character regex — You added commas between each special character (like [,~,!]) which makes the regex look for those commas as part of the match, not the special characters themselves. Also, some characters were escaped incorrectly (like & instead of just &) and regex-reserved characters (like [, (, -) weren't properly escaped.

Corrected Full Code #

Here's the fixed version with explanations of each change:

public String isPasswordValid(String password) {
    // Fixed regex for special characters: matches any common special character, with proper escaping
    String specialCharsPattern = ".*[~!@#$%^&*()\\-_=+\\[\\]{}\\|;:,<.>/?].*";
    // Your number regex was correct, but we'll use it with matches() instead of contains()
    String numberPattern = ".*[0-9].*";

    // Cleaned up error messages for consistency
    String minSixCharacterErrorMessage = "Invalid password, Password should be at least 6 characters";
    String emptyFieldErrorMessage = "Invalid password, Field is empty, please enter a valid password";
    String missingSpecialCharacterErrorMessage = "Invalid password, It must contain a special character";
    String numberErrorMessage = "Invalid password, It must contain at least one number";
    String noSpaceCharacterErrorMessage = "Invalid password, Password can't contain spaces";

    // Add null check to avoid NullPointerException
    if (password == null || password.isEmpty()) {
        return emptyFieldErrorMessage;
    }
    // Check for spaces first to fail fast
    if (password.contains(" ")) {
        return noSpaceCharacterErrorMessage;
    }
    if (password.length() < 6) {
        return minSixCharacterErrorMessage;
    }
    // Use matches() instead of contains() to validate regex patterns
    if (!password.matches(specialCharsPattern)) {
        return missingSpecialCharacterErrorMessage;
    }
    if (!password.matches(numberPattern)) {
        return numberErrorMessage;
    }

    // Return empty string when all checks pass
    return "";
}

Key Changes Explained #

• Switched from contains() to matches(): This method validates the entire string against your regex, which is exactly what we need for password rules.
• Fixed special character regex:
  • Removed unnecessary commas between characters (regex character sets [] treat each character as an "or" match automatically).
  • Escaped regex-reserved characters (like \\[ instead of [, \\- instead of -) so they're treated as literal characters.
  • Fixed the HTML escape (changed & to just &) so it matches the actual & character in passwords.
• Added null check: Prevents a crash if someone passes null instead of a string.
• Reordered checks: We check for spaces and empty values first to fail fast, saving unnecessary work on invalid passwords.

Optional Performance Upgrade #

If this method gets called frequently (like in a login form), precompile your regex patterns once as static class members to avoid re-compiling them every time:

// Precompile regex patterns once when the class loads
private static final Pattern SPECIAL_CHARS_PATTERN = Pattern.compile(".*[~!@#$%^&*()\\-_=+\\[\\]{}\\|;:,<.>/?].*");
private static final Pattern NUMBER_PATTERN = Pattern.compile(".*[0-9].*");

public String isPasswordValid(String password) {
    // ... error message definitions ...

    if (password == null || password.isEmpty()) {
        return emptyFieldErrorMessage;
    }
    if (password.contains(" ")) {
        return noSpaceCharacterErrorMessage;
    }
    if (password.length() < 6) {
        return minSixCharacterErrorMessage;
    }
    // Use the precompiled patterns with a Matcher
    if (!SPECIAL_CHARS_PATTERN.matcher(password).matches()) {
        return missingSpecialCharacterErrorMessage;
    }
    if (!NUMBER_PATTERN.matcher(password).matches()) {
        return numberErrorMessage;
    }

    return "";
}

内容的提问来源于stack exchange，提问作者hamdy