Skip to content
Snippets Groups Projects
  1. Sep 04, 2021
  2. Aug 30, 2021
    • Julian's avatar
      Restrict password alphabet to SASLprep-safe ASCII subset · cb2d7f35
      Julian authored
      Prior to this change user passwords were not validated on change aside from
      their length, but validated on login/bind by ldap3 with SASLprep. Instead of
      using SASLprep on password change, this change restricts passwords to 7-bit
      ASCII without control characters. Control characters are forbidden by
      SASLprep. Multi-byte characters are uncommon in password, especially in those
      generated by password managers. This ensures that passwords are always
      SASLprep-safe without implementing the rather complex SASLprep algorithm. It
      also allows us to fully describe the alphabet restrictions in the relevant
      forms.
      
      Fixes #100
      cb2d7f35
  3. Jul 30, 2021
  4. Jul 26, 2021
  5. Jun 17, 2021
  6. Jun 13, 2021
  7. Jun 12, 2021
  8. May 01, 2021
  9. Feb 23, 2021
  10. Feb 19, 2021
  11. Feb 15, 2021
  12. Jan 29, 2021
  13. Oct 26, 2020
Loading