Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement password policies to avoid weak passwords #3948

Closed
nobodyiam opened this issue Sep 5, 2021 · 4 comments · Fixed by #4008
Closed

Implement password policies to avoid weak passwords #3948

nobodyiam opened this issue Sep 5, 2021 · 4 comments · Fixed by #4008
Assignees
Labels
feature request Categorizes issue as related to a new feature. help wanted

Comments

@nobodyiam
Copy link
Member

Is your feature request related to a problem? Please describe.
The default spring security auth method does not have control set in password complexity. It is possible to add a user with a weak password.

Describe the solution you'd like
To add a secure password policy so that admin users must set complex passwords for users.

@nobodyiam nobodyiam added help wanted feature request Categorizes issue as related to a new feature. labels Sep 5, 2021
@WillardHu
Copy link
Contributor

Hi @nobodyiam, is this feature completed? I'll add password validation to the user manage form and the backend api server. Verification specification: The password must contain uppercase and lowercase characters and digits, and the length is greater then or equals 8 characters.

@nobodyiam
Copy link
Member Author

@WillardHu This feature is not yet assigned, it'll be great if you could work on this! Shall I assign this issue to you?

@WillardHu
Copy link
Contributor

@WillardHu This feature is not yet assigned, it'll be great if you could work on this! Shall I assign this issue to you?

Ok, thanks. @nobodyiam

@nobodyiam
Copy link
Member Author

@WillardHu This issue is now assigned to you, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature request Categorizes issue as related to a new feature. help wanted
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants