New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: don't accept a password longer than 72 bytes #6848

Draft

btasker wants to merge 3 commits into master from pwdlen-verify

btasker commented Jan 3, 2024

Fixes https://github.com/influxdata/quartz/issues/7457

Auth0 use bcrypt for password storage - the maximum input length for bcrypt is 72 bytes and Auth0 will truncate anything after that.

This adds a check to the signup page password validation.

Checklist

Authors and Reviewer(s), please verify the following:

A PR description, regardless of the triviality of this change, that communicates the value of this PR
Well-formatted conventional commit messages that provide context into the change
Documentation updated or issue created (provide link to issue/PR)
Signed CLA (if not already signed)
Feature flagged, if applicable

btasker added 3 commits

January 3, 2024 16:38


          fix: don't accept a password longer than 72 bytes

1ee4104


          fix: add missing bracket (had fixed earlier but not saved)

6d15bf6


          chore: refactor to fix tests

0b39f83

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet