hcengineering / hcengineering/platform
Doesn't exist field validator for passwords in SignUp component of Platform
- Dominant language
- TypeScript
- Stars
- 27.7k
- Forks
- 2.2k
- PR merge metrics
- No merged PRs in 30d
Description
Doesn't field validator exist for **passwords** in SignUp component of Platform Users can use passwords like '1' or '2' with only 1 or 2 symbols, which is quite strange for the signUp system. Need to make rule for this how much symbols should be and the strength of the password (with %$ symbols, upperCase, numbers e.t.c)
Here is an emulation of this request in which the user gets status code 200
`curl 'https://account.bold.ru/' -X POST -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:123.0) Gecko/20100101 Firefox/123.0' -H 'Accept: */*' -H 'Accept-Language: en' -H 'Accept-Encoding: gzip, deflate, br' -H 'Referer: https://app.bold.ru/' -H 'Content-Type: application/json' -H 'Origin: https://app.bold.ru' -H 'Connection: keep-alive' -H 'Sec-Fetch-Dest: empty' -H 'Sec-Fetch-Mode: cors' -H 'Sec-Fetch-Site: same-site' -H 'Sec-GPC: 1' -H 'TE: trailers' --data-raw '{"method":"createAccount","params":["test","1","test","test"]}'`
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.