1144887 - No password restrictions when you sign up

Status: RESOLVED WONTFIX

(support.mozilla.org :: BuddyUp, defect)

Description

[Christos Bacharakis]

Flame, Firefox OS 2.0

When you register for a new account in the buddyup applications there is not a restriction for the size or the characters of the password.

When you reset your password though and you are redirected to http://support.allizom.org/ your password must be at least 8 characters and must contain at least a letter and a number.

Comment 1

[Marcia Knous [:marcia]]

Not a blocker, ni on mike to see why there might be a difference between when you create an account versus when you reset an account.

Comment 2

[Michael Cooper [:mythmon]]

Since this restriction happens in the views and APIs instead of the model, every time we implement something that works with passwords we have to include password validation. The view on the site has this logic implemented, but the API does not. Ideally we would move this logic into a centralized place, like the model, but in this case that probably is harder than it should be because of the way our user models are organized. For now we can implement this logic in the API as well.

Comment 3

[Will Kahn-Greene [:willkg] ET needinfo? me]

SUMO has moved to Lithium and this bug is for a SUMO project that isn't around anymore. Given that, I'm closing as WONTFIX.