Bug 33042

Summary:	Enforce 4 character groups (lowercase, uppercase, numbers and special characters) in passwords
Product:	Koha	Reporter:	Katrin Fischer <katrin.fischer>
Component:	Authentication	Assignee:	Bugs List <koha-bugs>
Status:	NEW ---	QA Contact:	Testopia <testopia>
Severity:	enhancement
Priority:	P5 - low	CC:	dpavlin
Version:	Main
Hardware:	All
OS:	All
Change sponsored?:	---	Patch complexity:	---
Documentation contact:		Documentation submission:
Text to go in the release notes:		Version(s) released in:
Circulation function:
Bug Depends on:
Bug Blocks:	25934

Description Katrin Fischer 2023-02-22 16:59:13 UTC

We should make it possible to enforce passwords that have 4 instead of just 3 character groups (like RequireStrongPassword) does now in Koha.

This could be done as a new option to RequireStrongPassword that allows libraries to update from one setting to the other. We could also maybe rename the parameter to something like "PasswordComplexity".

For legacy reasons I guess we'd also need a third option 'no requirements (strictly not recommended)'.