Page MenuHomePhabricator

Bring new password validation into AuthPasswordEngine
ClosedPublic

Authored by epriestley on Jan 22 2018, 12:35 AM.
Tags
None
Referenced Files
F14022954: D18902.diff
Wed, Nov 6, 9:10 PM
F14000768: D18902.id45358.diff
Fri, Oct 25, 12:42 AM
Unknown Object (File)
Oct 3 2024, 10:55 AM
Unknown Object (File)
Oct 3 2024, 9:44 AM
Unknown Object (File)
Oct 2 2024, 7:20 AM
Unknown Object (File)
Sep 18 2024, 1:22 PM
Unknown Object (File)
Sep 17 2024, 1:56 AM
Unknown Object (File)
Sep 16 2024, 4:44 AM
Subscribers
None

Details

Summary

Ref T13043. We have ~4 copies of this logic (registration, lost password recovery, set password, set VCS password).

Currently it varies a bit from case to case, but since it's all going to be basically identical once account passwords swap to the new infrastructure, bring it into the Engine so it can live in one place.

This also fixes VCS passwords not being affected by account.minimum-password-length.

Test Plan

Hit all errors in "VCS Password" panel. Successfully changed password.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

amckinley added inline comments.
src/applications/auth/engine/PhabricatorAuthPasswordEngine.php
91

strlen($raw_confirm)?

This revision now requires changes to proceed.Jan 23 2018, 6:39 PM
  • Fix strlen().
  • Tested to actually hit this error.
  • Changed password.
This revision is now accepted and ready to land.Jan 23 2018, 6:43 PM
This revision was automatically updated to reflect the committed changes.