6f43b480b1
Operator decision — 12 was too long; 6 is acceptable and password strength is the user's
own responsibility. Changed Password::min(12) → min(6) in every place that validates a
password (password change, forgot/reset, settings profile, create-user) and updated the
visible hints (de + en). The upper/lowercase + digit complexity is unchanged — only the
minimum length was flagged.
Verified: a 6-char complex password ("Abc123") now validates; too-short and complexity-less
passwords still reject; the password page shows "min. 6"; full suite 467 pass.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| .gitkeep | ||
| ForgotPassword.php | ||
| Login.php | ||
| PasswordChange.php | ||
| ResetPassword.php | ||
| TwoFactorBackup.php | ||
| TwoFactorChallenge.php | ||
| TwoFactorSetup.php | ||