Merge pull request #5359 from overleaf/jpa-web-passwordStrengthOptions

[web] add defaults for passwordStrengthOptions into the server-ce config GitOrigin-RevId: 69f4aec55219cd349fed861c766c135481b2bfea
2021-10-07 08:04:36 +00:00
parent 12890edd14
commit a4fb83e38e
1 changed files with 7 additions and 5 deletions
@@ -418,11 +418,13 @@ module.exports = {
  // -----------
  // These restrict the passwords users can use when registering
  // opts are from http://antelle.github.io/passfield
-  // passwordStrengthOptions:
-  // 	pattern: "aA$3"
-  // 	length:
-  // 		min: 6
-  // 		max: 128
+  passwordStrengthOptions: {
+    length: {
+      min: 6,
+      // Bcrypt does not support longer passwords than that.
+      max: 72,
+    },
+  },

  // Email support
  // -------------