authgear / authgear/authgear-server
Password suggestion is not smart enough in password manager
- Dominant language
- Go
- Stars
- 2k
- Forks
- 125
- Avg merge
- 2d 17h
- Merged PRs (30d)
- 32
Description
When 1password is installed to the browser, it will suggest a new password in when signing up or creating a new password.
It suggestd a password based on the password policy.
When "At least 1 digit" is enabled in the password policy and no requirement on other characters,
it will suggest a password with all characters in numbers.
I expect the password would be a random string with alphabet and digits mixed.
Not sure if it's a 1password bug or something we can change.
Contributor guide
Research direction
Start by reproducing the password suggestion with 1Password installed and a policy requiring at least one digit but no other character classes. The issue names no source files or tests; determine whether the behavior is controlled by Authgear or 1Password, and consider the issue done only when the responsible component produces an alphabet-and-digit password or the responsibility is documented.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100