Repository navigation
Passwords do not have any length or character requirements #4142
Description
Observed behavior
An account was created in the hotfixes server environment with a password of a.
Expected behavior
We should have a basic minimum length threshold for passwords, at the very least. In development mode, the password a should still work.
User-facing consequences
Shorter passwords are easier to breach and Studio is an online platform where it's important to have this.
Activity
cerdo03 commentedon Dec 8, 2023
Hi, I wanted to pick up this issue, can you guide me how can I check if it is development mode so that the password validation is not valid for dev server?
cerdo03 commentedon Dec 8, 2023
Are there any other validations that need to be implemented?
MisRob commentedon Dec 12, 2023
Thank you, @cerdo03! We will review.
bjester commentedon Dec 13, 2023
@cerdo03 Adding a length check to the backend would also be worthwhile, if you're familiar with python/django. Otherwise, no worries about that.
cerdo03 commentedon Dec 13, 2023
Yeah I am familiar with django, I'll implement the password validation and raise the updated PR soon. Thanks for the review.