-
Notifications
You must be signed in to change notification settings - Fork 1.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Increase password requirements #3454
Conversation
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
8f8dffe
to
e6f9466
Compare
6940288
to
0c10c14
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Tested, works as stated. Checks need addressing.
backend/onyx/auth/users.py
Outdated
) | ||
if not any(char in "!@#$%^&*()_+-=[]{}|;:,.<>?" for char in password): | ||
raise exceptions.InvalidPasswordException( | ||
reason="Password must contain at least one special character (!@#$%^&*()_+-=[]{}|;:,.<>?)." |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Special characters feels like the kind of thing we should declare as a constant somewhere.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Generally agree!
5d44810
to
1557c7d
Compare
1557c7d
to
334bc6b
Compare
Description
Fixes https://linear.app/danswer/issue/DAN-1184/login-bruteforce
How Has This Been Tested?
Accepted Risk (provide if relevant)
N/A
Related Issue(s) (provide if relevant)
N/A
Mental Checklist:
Backporting (check the box to trigger backport action)
Note: You have to check that the action passes, otherwise resolve the conflicts manually and tag the patches.