-
Notifications
You must be signed in to change notification settings - Fork 227
FOUR-11415 Password Policy Configuration #5682
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
f2f9738
to
02a4fcc
Compare
02a4fcc
to
b5b4d50
Compare
@@ -54,7 +54,7 @@ | |||
{!! Form::label('confPassword', __('Confirm Password')) !!} | |||
{!! Form::password('confPassword', ['id' => 'confPassword', 'rows' => 4, 'class'=> 'form-control', 'v-model' | |||
=> 'formData.confPassword', 'autocomplete' => 'new-password', 'v-bind:class' => '{\'form-control\':true, \'is-invalid\':errors.password}']) !!} | |||
<div class="invalid-feedback" :style="{display: (errors.password) ? 'block' : 'none' }" role="alert" v-if="errors.password">@{{errors.password[0]}}</div> | |||
<div class="invalid-feedback" :style="{display: (errors.password) ? 'block' : 'none' }" role="alert" v-for="(error, index) in errors.password">@{{error}}</div> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please split thi line in multiple lines to enhance readability
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@julceslauhub review or update the password related tests, so they pass accordingly to the new password policy
SonarQube Quality Gate |
Issue & Reproduction Steps
The passwords policies are not configurable
Solution
Added validations when the users login to the app
How to Test
Add in .env the next values:
PASSWORD_POLICY_NUMBERS=TRUE
PASSWORD_POLICY_UPPERCASE=TRUE
PASSWORD_POLICY_SPECIAL=TRUE
PASSWORD_POLICY_MINIMUM_LENGTH=8
PASSWORD_POLICY_MAXIMUM_LENGTH=12
PASSWORD_POLICY_LOGIN_ATTEMPTS=5
And validate when user login to the app
Related Tickets & Packages
https://processmaker.atlassian.net/browse/FOUR-11415
Code Review Checklist