Update spring boot dependencies to latest possible#946
Conversation
GAsplund
left a comment
There was a problem hiding this comment.
Seems like an acceptable regression as password resets are a thing.
LGTM
Oscariremma
left a comment
There was a problem hiding this comment.
Good that we're updating the deps.
I don't think the password limit of "only" 72 chars will be a problem. The only thing i can think of is if she has an existing password of more than that. But in that case i guess they will just have to reset it...
Yeah, that was my thinking as well. In theory, people could have >72 character passwords, and people who do will just have to reset their passwords to a <=72 character password. |
|
Existing passwords and tokens with more than 72 characters will still work. |
Also limits new passwords to a maximum of 72 characters, due to bcrypt.