RocketChat / RocketChat/Rocket.Chat
Password policy not adhered to by automatic password generation
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 46.1k
- Forks
- 13.9k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 130
Description
Description:
When the password policy setting is switched on and a password is automatically generated by an administrator during the user creation process, the generated password does not adhere to the specified policy, and thus fails to be saved.
Steps to reproduce:
- Configure a password policy.
- As an administrator, manually add a new user.
- Attempt to set that user's password, using the automatic password generation feature.
Expected behavior:
The generated password conforms to the configured password policy.
Actual behavior:
The generated password fails to conform to the configured password policy and is not set.
Server Setup Information:
- Version of Rocket.Chat Server: 0.71.0
- Operating System: Ubuntu 18.04
- Deployment Method: Docker
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files or tests are named. Start by tracing automatic password generation from the administrator's user-creation flow into password-policy validation, then reproduce the reported setup and confirm that generated passwords satisfy the configured policy and can be saved.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100