Password validation changes #5

Open
opened 2025-11-13 09:14:12 +00:00 by arne · 0 comments
Owner
  • only validate minimum password length, not anything else (so NO checks for capital/lowercase/number/special chars/etc) -> this reflects modern security standards
  • if we check in the frontend, make sure we also check in the backend (general principle: check things in the backend first, then we can consider frontend)
  • make minimum password length configurable (config/get :password/minimum-length)
- [ ] only validate minimum password length, not anything else (so NO checks for capital/lowercase/number/special chars/etc) -> this reflects modern security standards - [ ] if we check in the frontend, make sure we also check in the backend (general principle: check things in the backend first, then we can consider frontend) - [ ] make minimum password length configurable `(config/get :password/minimum-length)`
Sign in to join this conversation.
No labels
bug
small
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
gaiwan/Oak#5
No description provided.