[pbs-devel] [PATCH proxmox-backup 0/3] implement a minimum length of 8 characters for new passwords

Shannon Sterz s.sterz at proxmox.com
Fri Oct 4 15:40:51 CEST 2024


this patch series aims to implement a minimum length of 8 characters for
new passwords. this is more in line with NIST's current recommendations
[1].

the first patch in this series also ignores the `password` parameter in
the update user endpoint, as it is currently redundant. see the commit
for more info.

[1]: https://pages.nist.gov/800-63-4/sp800-63b.html#passwordver

Shannon Sterz (3):
  api: ignore password parameter in the update_user endpoint
  api: enforce minimum character limit of 8 on new passwords
  ui: set min length for new passwords to 8

 pbs-api-types/src/lib.rs |  2 +-
 src/api2/access/mod.rs   |  4 ++--
 src/api2/access/user.rs  | 32 +++++++++++---------------------
 www/config/UserView.js   |  1 +
 www/window/UserEdit.js   |  2 +-
 5 files changed, 16 insertions(+), 25 deletions(-)

--
2.39.5





More information about the pbs-devel mailing list