Bug 33042

Summary: Enforce 4 character groups (lowercase, uppercase, numbers and special characters) in passwords
Product: Koha Reporter: Katrin Fischer <katrin.fischer>
Component: AuthenticationAssignee: Bugs List <koha-bugs>
Status: NEW --- QA Contact: Testopia <testopia>
Severity: enhancement    
Priority: P5 - low CC: dpavlin
Version: Main   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Bug Depends on:    
Bug Blocks: 25934    

Description Katrin Fischer 2023-02-22 16:59:13 UTC
We should make it possible to enforce passwords that have 4 instead of just 3 character groups (like RequireStrongPassword) does now in Koha.

This could be done as a new option to RequireStrongPassword that allows libraries to update from one setting to the other. We could also maybe rename the parameter to something like "PasswordComplexity".

For legacy reasons I guess we'd also need a third option 'no requirements (strictly not recommended)'.