Skip to content
Snippets Groups Projects
Commit 980f2ba3 authored by Torben Hansen's avatar Torben Hansen Committed by Georg Ringer
Browse files

[FEATURE] Add password policy validation for TCA type=password


It is now possible to assign a password policy to TCA fields of the
type `password`. For configured fields, the password policy validator
will be used in `DataHandler` to ensure, that the new password complies
with the configured password policy.

The TCA field `password` for the tables `be_users` and `fe_users`
now use the password policy configured in
`$GLOBALS['TYPO3_CONF_VARS']['FE']['passwordPolicy']` (fe_users) or
`$GLOBALS['TYPO3_CONF_VARS']['BE']['passwordPolicy']` (be_users)
by default.

If a password does not comply with the configured password policy,
the password is not saved, a warning is logged to `sys_log` and
a flash message is shown.

Resolves: #97389
Releases: main
Signed-off-by: default avatarTorben Hansen <derhansen@gmail.com>
Change-Id: Icfb1daccac6c89389cfe92fc00987c0c63ec7955
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/77424


Tested-by: default avatarcore-ci <typo3@b13.com>
Tested-by: default avatarBenni Mack <benni@typo3.org>
Reviewed-by: default avatarBenni Mack <benni@typo3.org>
Reviewed-by: default avatarGeorg Ringer <georg.ringer@gmail.com>
Tested-by: default avatarGeorg Ringer <georg.ringer@gmail.com>
parent aa0c7cb5
No related branches found
No related tags found
No related merge requests found
Showing
with 248 additions and 8 deletions
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment