8
97%
master: 97%

Ran 17 Jan 2020 09:59PM UTC

Files 26

Run time 2s

Badge

Embed ▾

Committed 17 Jan 2020 09:48PM UTC coverage: 96.689% (-0.06%) from 96.744%

Job # REQUIREMENTS=release

Build Type

push

travis-ci

Committed by

web-flow

Commit Message

Add pluggable password validation. (#220)

Password validation for registration, change, and reset has only ever
checked for length - and the length wasn't configurable.

This add an easy way for applications to provide their own password validator as
well as provide a default password validator that checks:

1) length
2) complexity using zxcvbn
3) breaches using https://haveibeenpwned.com/API/v3

These 3 validations are also made available as part of the API so that applications
that need their own validator can still make use (if desired) of the underlying validators.

New error messages and configurations were added and documented.

The default minimum password length has been changed from 6 to 8 (NIST).

The one downside to using zxcvbn is that it is no longer maintained (the original JS version)
and the python version currently isn't very string-localizable friendly.

closes: #195
closes: #99

Run Details

2336 of 2416 relevant lines covered (96.69%)

0.97 hits per line

jwag956 / flask-security / 534 / 8
97%
master: 97%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 534.8 (REQUIREMENTS=release)

jwag956 / flask-security / 534 / 8 97% master: 97%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 534.8 (REQUIREMENTS=release)

jwag956 / flask-security / 534 / 8
97%
master: 97%

README BADGES
x