glm94/secure-core
1
0
Fork 0
Code Issues 9 Pull Requests Releases Wiki Activity

Password Validation on Login and Password Rule Changes #10

New Issue
Open
opened 2021-06-30 16:04:33 -05:00 by glm94 · 0 comments
glm94 commented 2021-06-30 16:04:33 -05:00
Owner
Copy Link
Copy Source

Currently, when a user logins in, the password supplied is checked against the password rules defined by the application settings or the absolute hardcoded limits in the application code. However, what if the min length for a password is changed after a user has already been created and when entering their correct password to login fails? The login logic might need to be tweaked to make sure the password isn't massively long (like say 1024 characters or more) and ignore the min length. There might need to be some fucntion to require the user to redo their password if the min length requirement is not met. Overall, this is a somewhat minor things that would simply require a valid user to reset their password, but there should be at least a sane way to alert the user that the password rules have changed and that they need to change their password.

Currently, when a user logins in, the password supplied is checked against the password rules defined by the application settings or the absolute hardcoded limits in the application code. However, what if the min length for a password is changed after a user has already been created and when entering their correct password to login fails? The login logic might need to be tweaked to make sure the password isn't massively long (like say 1024 characters or more) and ignore the min length. There might need to be some fucntion to require the user to redo their password if the min length requirement is not met. Overall, this is a somewhat minor things that would simply require a valid user to reset their password, but there should be at least a sane way to alert the user that the password rules have changed and that they need to change their password.
glm94 added the enhancementbug labels 2021-06-30 16:04:33 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No labels bug enhancement
Milestone
No items
No Milestone
Assignees
Clear assignees
glm94 (Garritt McCune)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: glm94/secure-core#10