Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Password known as compromised can be rejected if an entry is set in the DB

Download Browse

The undocumented option reject_compromised_password is replaced by an entry in the DB. To enable the feature you can use the following SQL query: INSERT INTO password_configuration(breached_password_enabled) VALUES (1) A future contribution will add the possibility to enable/disable this feature from the site administration UI. This is part of story #11182: prevent users to use a breached password Change-Id: Ifd0f2fa0058afe6389960180eca02f13784aa429

+225 −16
Thomas Gerbet (tgerbet) 2018-04-03 20:56
Thomas Gerbet (tgerbet) 2018-04-03 20:56
b433800d737d921faad2e92502fbcbe604f8e5b8
a09fc0e13ee4fed35432a114d3663210850e0a05
git #tuleap/stable/b433800d737d921faad2e92502fbcbe604f8e5b8

Modified Files

Side by side diff
Inline diff
Name
M src/common/account/RegisterPresenter.class.php +7 −2 Go to diff View file
M src/common/autoload.php +5 −2 Go to diff View file
A src/common/password/Configuration/PasswordConfiguration.php +42 −0 Go to diff View file
A src/common/password/Configuration/PasswordConfigurationDAO.php +31 −0 Go to diff View file
A src/common/password/Configuration/PasswordConfigurationRetriever.php +46 −0 Go to diff View file
M src/common/password/PasswordStrategy.class.php +4 −2 Go to diff View file
M src/db/mysql/database_structure.sql +5 −0 Go to diff View file
A src/db/mysql/updates/2018/201804032030_add_password_configuration.php +48 −0 Go to diff View file
M src/www/admin/usergroup.php +5 −1 Go to diff View file
M src/www/include/account.php +7 −2 Go to diff View file
M src/www/include/user.php +25 −7 Go to diff View file