Enforce password policy

Liblor / applied_sec_lab

Applied Security Laboratory - AS19

6 stars 1 forks source link

Enforce password policy #53

Closed Miro-H closed 4 years ago

Miro-H commented 4 years ago

Enforce password policy
- Min length: 8
- Not in rockyou wordlist
Enforce min passphrase length: 12

Some refactoring, changed my test cases to the new state.

@RequestForCoffee I put the min lengths in a shared constant field and replaced wherever I think the min length should be present.

Miro-H commented 4 years ago

Oh, I need to check if all legacy passwords have length 8

Miro-H commented 4 years ago

Oh, I need to check if all legacy passwords have length 8

There is at least one with length 6. But I checked again and it should only affect password change requests (but I found and removed some misplaced min len requirements)