PostgreSQL includes robust security standards around all aspects such as authentication, authorization, accounting and auditing. User management and r

Announcing Credcheck extension to enforce username and password checks in PostgreSQL

submited by

Style Pass

2021-07-02 17:00:09

PostgreSQL includes robust security standards around all aspects such as authentication, authorization, accounting and auditing. User management and role based segregation that satisfy enterprise standards can be implemented at ease. Similarly, organizations may be willing to enforce certain compliance around the password standards such as the minimum upper case characters or minimum number of numbers and special characters and the length of the password. Such username password checks are important in an environment where strong security policies are a must. In this Article, we shall discuss how we could use the extension credcheck to enforce username and password standards in PostgreSQL.

While such a username or password rule is not available by default, there exists a hook in PostgreSQL called check_password_hook to enforce such policies. PostgreSQL Community has luckily helped us with the template passwordcheck , that can be used to modify the source code as per our needs. We have used the same module as a template and created this extension called credcheck that enforces the following standards.