BoltAuth / Auth

Auth extension for Bolt
MIT License
16 stars 17 forks source link

[BUG] Password Change results in being left out #51

Open drummerfun opened 5 years ago

drummerfun commented 5 years ago

If you change your password to a password with less than 6 characters you can do this successfully. But after you login again there is a check if you use less than 6 characters. While you change your password there seems to be no such check. In the end you are left out because of your password change.

Details

Reproduction

  1. In Bolt, go to Extensions --> Auth
  2. Edit on page "Manage Site Auth Roles" a user name
  3. Set Password to a short one, e.g. "11"
  4. Save your profile

Result: There will be no error. The password is accepted.

  1. Try to login

Result: There will be a message "This value is too short. It should have 6 characters or more." ​ Result: If you are not an administrator you will be left out of the system.

Same issue happens when you change your password while logged into Auth at the password change page: No warning and you will be left out after you log out.