internetstandards / Internet.nl-dashboard

Application that creates a dashboard for scans using the Internet.nl API.
Apache License 2.0
7 stars 9 forks source link

Enforce that passwords need to be at least 16 chartacters #514

Closed baknu closed 1 month ago

baknu commented 1 month ago

Since v4.3.0, users can change their dashboard password (note: this does not affect their API/batch password). However, the change passowrd functionality only enforces a minimum of 8 characters, while our Vraagbaak (@dennisbaaten) hands out passwords with 16 characters. So basically, users can now lower their password security by changing their password.

Suggested solution: enforce that passwords consist of a minimum of 16 characters.