Proxmox/proxmox-backup
5
0
Fork 0
mirror of git://git.proxmox.com/git/proxmox-backup.git synced 2025-02-01 05:47:22 +03:00
Code Releases Activity

api: enforce minimum character limit of 8 on new passwords

Browse Source 
we already have two different password schemas, `PBS_PASSWORD_SCHEMA`
being the stricter one, which ensures a minimum length of new
passwords. however, this wasn't used on the change password endpoint
before, so add it there too. this is also in-line with NIST's latest
recommendations [1].

[1]: https://pages.nist.gov/800-63-4/sp800-63b.html#passwordver

Signed-off-by: Shannon Sterz <s.sterz@proxmox.com>
This commit is contained in:
Shannon Sterz 2024-10-04 15:40:53 +02:00 committed by Thomas Lamprecht
parent 9f3733c5ed
commit fb5b6f3eab
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pbs-api-types/src/lib.rs
View File

@ -214,7 +214,7 @@ pub const OPENSSL_CIPHERS_TLS_1_3_SCHEMA: Schema =
pub const PBS_PASSWORD_SCHEMA: Schema = StringSchema::new("User Password.") pub const PBS_PASSWORD_SCHEMA: Schema = StringSchema::new("User Password.")
.format(&PASSWORD_FORMAT) .format(&PASSWORD_FORMAT)
.min_length(5) .min_length(8)
.max_length(64) .max_length(64)
.schema(); .schema();

4
src/api2/access/mod.rs
View File

@ -13,7 +13,7 @@ use proxmox_schema::api;
use proxmox_sortable_macro::sortable; use proxmox_sortable_macro::sortable;
use pbs_api_types::{ use pbs_api_types::{
Authid, User, Userid, ACL_PATH_SCHEMA, PASSWORD_FORMAT, PASSWORD_SCHEMA, PRIVILEGES, Authid, User, Userid, ACL_PATH_SCHEMA, PASSWORD_FORMAT, PBS_PASSWORD_SCHEMA, PRIVILEGES,
PRIV_PERMISSIONS_MODIFY, PRIV_SYS_AUDIT, PRIV_PERMISSIONS_MODIFY, PRIV_SYS_AUDIT,
}; };
use pbs_config::acl::AclTreeNode; use pbs_config::acl::AclTreeNode;
@ -75,7 +75,7 @@ async fn user_update_auth<S: AsRef<str>>(
type: Userid, type: Userid,
}, },
password: { password: {
schema: PASSWORD_SCHEMA, schema: PBS_PASSWORD_SCHEMA,
}, },
"confirmation-password": { "confirmation-password": {
type: String, type: String,