Firebase应用内密码重置咨询：自定义密码复杂度校验需求

Got it, let's break down how to build your custom in-app password reset flow with password complexity checks, using Firebase Auth's confirmPasswordResetWithCode:newPassword:completion: method on iOS.

Step 1: Build Your Custom Reset UI #

First, create a dedicated screen in your app with these core UI components:

• A text field for the password reset code (sent to the user's email)
• A secure text field for the new password
• A secure text field for confirming the new password
• A submit button to trigger the reset process

Make sure to add basic UI validation upfront (e.g., disable the submit button until all fields are filled, check that password and confirm password match).

Step 2: Implement Local Password Complexity Checks #

Before sending anything to Firebase, add your custom validation logic to ensure the password meets your required complexity rules. Here's an example Swift implementation for common rules (adjust based on your needs):

func isPasswordValid(_ password: String) -> Bool {
    // Example rules: Minimum 8 characters, 1 uppercase, 1 lowercase, 1 number, 1 special character
    let passwordRegex = "^(?=.*[a-z])(?=.*[A-Z])(?=.*\\d)(?=.*[!@#$%^&*()_+\\-=\\[\\]{};':\"\\\\|,.<>\\/?]).{8,}$"
    let passwordPredicate = NSPredicate(format:"SELF MATCHES %@", passwordRegex)
    return passwordPredicate.evaluate(with: password)
}

You can show user-friendly error messages if the password fails (e.g., "Password must include at least one uppercase letter" instead of a generic error).

Step 3: Integrate Firebase's Password Reset Method #

Once the local checks pass, call Firebase's confirmPasswordResetWithCode:newPassword:completion: method to finalize the reset. Here's how to do it in both Swift and Objective-C:

Swift Implementation #

@IBAction func submitResetTapped(_ sender: UIButton) {
    guard let resetCode = resetCodeTextField.text, !resetCode.isEmpty else {
        // Show error: Reset code is required
        return
    }
    guard let newPassword = newPasswordTextField.text, !newPassword.isEmpty else {
        // Show error: New password is required
        return
    }
    guard newPassword == confirmPasswordTextField.text else {
        // Show error: Passwords don't match
        return
    }
    
    // Run local complexity check
    guard isPasswordValid(newPassword) else {
        // Show error: Password doesn't meet complexity requirements
        return
    }
    
    // Call Firebase's reset method
    Auth.auth().confirmPasswordReset(withCode: resetCode, newPassword: newPassword) { error in
        if let error = error {
            // Handle Firebase errors (e.g., invalid reset code, password too weak)
            print("Password reset failed: \(error.localizedDescription)")
            return
        }
        // Success: Password reset completed, navigate user to login screen
        print("Password reset successful!")
    }
}

Objective-C Implementation #

- (IBAction)submitResetTapped:(UIButton *)sender {
    NSString *resetCode = self.resetCodeTextField.text;
    NSString *newPassword = self.newPasswordTextField.text;
    NSString *confirmPassword = self.confirmPasswordTextField.text;
    
    if (resetCode.length == 0) {
        // Show error: Reset code is required
        return;
    }
    if (newPassword.length == 0) {
        // Show error: New password is required
        return;
    }
    if (![newPassword isEqualToString:confirmPassword]) {
        // Show error: Passwords don't match
        return;
    }
    
    // Run local complexity check
    if (![self isPasswordValid:newPassword]) {
        // Show error: Password doesn't meet complexity requirements
        return;
    }
    
    // Call Firebase's reset method
    [[FIRAuth auth] confirmPasswordResetWithCode:resetCode newPassword:newPassword completion:^(NSError * _Nullable error) {
        if (error) {
            // Handle Firebase errors
            NSLog(@"Password reset failed: %@", error.localizedDescription);
            return;
        }
        // Success: Navigate to login
        NSLog(@"Password reset successful!");
    }];
}

- (BOOL)isPasswordValid:(NSString *)password {
    NSString *passwordRegex = @"^(?=.*[a-z])(?=.*[A-Z])(?=.*\\d)(?=.*[!@#$%^&*()_+\\-=\\[\\]{};':\"\\\\|,.<>\\/?]).{8,}$";
    NSPredicate *passwordPredicate = [NSPredicate predicateWithFormat:@"SELF MATCHES %@", passwordRegex];
    return [passwordPredicate evaluateWithObject:password];
}

Key Notes to Remember #

• Local vs. Firebase Checks: Even with your local complexity validation, Firebase might still reject passwords that don't meet its own minimum requirements (e.g., too short). Always handle the completion block's error to inform the user.
• Reset Code Expiry: Firebase reset codes expire after a short time, so make sure to handle the "invalid code" error gracefully (e.g., prompt the user to request a new reset link).
• Security: Never store the reset code locally beyond the session, and ensure all password fields use secure text entry to prevent visibility.

Hope this helps you build the exact custom reset flow you need! If you hit any edge cases or have questions about specific error handling, feel free to follow up.

内容的提问来源于stack exchange，提问作者ADebOut