Skip to content

Fix user creation with stronger minimum password requirements

Nathan @ PFMediaTech requested to merge nathan-pmt/gitlab-ce:issue_14563 into master

What does this MR do?

doc/security/password_length_limits.md Describes a way to increase minimum requirements of passwords, via config/initializers/devise_password_length.rb. However, user creation hardcoded password generation at 8 characters.

If the minimum was set at any more than 8 characters, user creation will fail.

Function now looks up minimum length requirement.

What are the relevant issue numbers?

Fixes #14563 (closed).

Does this MR meet the acceptance criteria?

Merge request reports