Bug 33042 - Enforce 4 character groups (lowercase, uppercase, numbers and special characters) in passwords
Summary: Enforce 4 character groups (lowercase, uppercase, numbers and special charact...
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Authentication (show other bugs)
Version: Main
Hardware: All All
: P5 - low enhancement
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks: 25934
  Show dependency tree / graph
 
Reported: 2023-02-22 16:59 UTC by Katrin Fischer
Modified: 2023-02-22 17:00 UTC (History)
1 user (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Katrin Fischer 2023-02-22 16:59:13 UTC 
We should make it possible to enforce passwords that have 4 instead of just 3 character groups (like RequireStrongPassword) does now in Koha.

This could be done as a new option to RequireStrongPassword that allows libraries to update from one setting to the other. We could also maybe rename the parameter to something like "PasswordComplexity".

For legacy reasons I guess we'd also need a third option 'no requirements (strictly not recommended)'.