password-based-authentication-pattern

name	password-based-authentication-pattern
description	Security pattern for implementing password-based authentication. Use when designing login systems with username/password, implementing password storage, hashing, salting, peppering, password policies, or password reset flows. Specialization of the Authentication pattern.

Password-Based Authentication Security Pattern

A subject proves identity by providing a correct identifier (username/email) and corresponding password. Relies on the assumption that only the actual owner knows the correct password.

Core Components

Role	Type	Responsibility
Subject	Entity	Provides identifier and password
Enforcer	Enforcement Point	Ensures authentication before action processing
Verification Manager	Entity	Collects inputs for password verification
Comparator	Decision Point	Compares hash values
Hasher	Cryptographic Primitive	Calculates hash values
Password Store	Storage	Keeps hash values for registered identities
Registrar	Entity	Handles subject registration
Resetter	Entity	Handles credential reset
Password Policy	Information Point	Rules passwords must satisfy
SRNG