search

UoMResearchIT / extant

GNU Affero General Public License v3.0
0 stars 2 forks source link

Uninformative error msg when password complexity is not met. #3

Closed kkh451 closed 7 years ago

kkh451 commented 7 years ago

Where the user provides a password which does not meet the complexity requirements, the error msg is not informative.

Context 1: During sign up, a user who provides a weak password is simply told "too weak"; instead, they should be informed of the complexity rules so that they can meet them in their next attempt.

Context 2: This also happens if the administrator changes a user's password and provides a weak password.

kkh451 commented 7 years ago

The password complexity rules are now printed on the sign up page so this can be closed.