Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security fix - To handle user account password complexity #1592

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

Sandhyaranitp
Copy link

@Sandhyaranitp Sandhyaranitp commented Mar 1, 2024

Problem Description:

Security fix - To handle user account password complexity

Fix Implementation:

The source code has been integrated to handle the password complexity validation mechanism. This modification ensures that password is validated during both the user creation and Password update operation. If the specific password complexity condition is not met, operation will be aborted automatically, preventing the creation and modification of user account.

@kerimovscreations
Copy link

@Sandhyaranitp hi.

I guess this suggestion is related to this ticket - SERVER-7363
I recommend you to enable password policy enforcement configurable (such as within mongod.conf file).

Password can be validated

  • by regex pattern (which I would prefer)
  • by the custom parameters like in your branch
    • length (number)
    • contains special character (bool)
    • contains number (bool)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants