You want to add the following password constraints:

• Include an uppercase letter
• Include a lowercase letter
• Include a number

To add these additional constraints, you can use the regular expression (?=.*\\d)(?=.*[a-z])(?=.*[A-Z]).*

You have a custom validation constraint, named @RegisteredCustomerPasswordWithRegex, that matches passwords with regular expressions. To add @RegisteredCustomerPasswordWithRegex without modifying the out-of-the-box code, you can use XML.

To add @RegisteredCustomerPasswordWithRegex as a customer password constraint:

• Add the following XML code in a blank constraints.xml file:

  <?xml version='1.0' encoding='UTF-8'?>
  <constraint-mappings xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="http://jboss.org/xml/ns/javax/validation/mapping http://www.jboss.org/xml/ns/javax/validation/mapping/validation-mapping-1.0.xsd"
      xmlns="http://jboss.org/xml/ns/javax/validation/mapping">
  
      <bean class="com.elasticpath.domain.customer.Customer" ignore-annotations="false">
          <class>
              <constraint annotation="com.example.validation.constraints.RegisteredCustomerPasswordWithRegex" >
                  <!-- contains at least one digit, one lower case, and one upper case character -->
                  <element name="regex">(?=.*\\d)(?=.*[a-z])(?=.*[A-Z]).*</element>
              </constraint>
          </class>
      </bean>
  
  </constraint-mappings>

Five key points for how the above code works:

• The bean class specifies the class whose validation you are modifying, which in this case is customer.
• By setting ignore-annotations to false, Bean Validation validates using both annotations and XML constraints. By setting ignore-annotations to true, Bean validation ignores annotations and applies only XML constraints.
• Constraints applied at the class level are defined in the <class> tag.
• The @RegisteredCustomerPasswordWithRegex constraint is applied by the <constraint annotation> tag.
• The regular expression (?=.*\\d)(?=.*[a-z])(?=.*[A-Z]).*, which applies the additional restrictions on passwords, is passed into the annotation by using the <element name> tag.

To add the constraints.xml to your classpath:

• Add the <constraint-mapping> tag in the <validation> element as shown below:

  <?xml version='1.0' encoding='UTF-8'?>
  <validation-config xmlns="http://jboss.org/xml/ns/javax/validation/configuration" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://jboss.org/xml/ns/javax/validation/configuration http://jboss.org/xml/ns/javax/validation/configuration/validation-configuration-1.0.xsd">
  
      <constraint-mapping>/constraints.xml</constraint-mapping>
  
  </validation-config>