hcengineering / hcengineering/platform

Doesn't exist field validator for passwords in SignUp component of Platform

Open
#4,638 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
27.7k
Forks
2.2k
PR merge metrics
No merged PRs in 30d

Description

Doesn't field validator exist for **passwords** in SignUp component of Platform Users can use passwords like '1' or '2' with only 1 or 2 symbols, which is quite strange for the signUp system. Need to make rule for this how much symbols should be and the strength of the password (with %$ symbols, upperCase, numbers e.t.c)

Here is an emulation of this request in which the user gets status code 200

`curl 'https://account.bold.ru/' -X POST -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:123.0) Gecko/20100101 Firefox/123.0' -H 'Accept: */*' -H 'Accept-Language: en' -H 'Accept-Encoding: gzip, deflate, br' -H 'Referer: https://app.bold.ru/' -H 'Content-Type: application/json' -H 'Origin: https://app.bold.ru' -H 'Connection: keep-alive' -H 'Sec-Fetch-Dest: empty' -H 'Sec-Fetch-Mode: cors' -H 'Sec-Fetch-Site: same-site' -H 'Sec-GPC: 1' -H 'TE: trailers' --data-raw '{"method":"createAccount","params":["test","1","test","test"]}'`

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.