{"action":"opened","issue":{"url":"https://api.github.com/repos/vivienlacourba/trac-w3caccountsbundle/issues/176","repository_url":"https://api.github.com/repos/vivienlacourba/trac-w3caccountsbundle","labels_url":"https://api.github.com/repos/vivienlacourba/trac-w3caccountsbundle/issues/176/labels{/name}","comments_url":"https://api.github.com/repos/vivienlacourba/trac-w3caccountsbundle/issues/176/comments","events_url":"https://api.github.com/repos/vivienlacourba/trac-w3caccountsbundle/issues/176/events","html_url":"https://github.com/vivienlacourba/trac-w3caccountsbundle/issues/176","id":136424483,"number":176,"title":"Ensure new password strength","user":{"login":"vivienlacourba","id":2012282,"avatar_url":"https://avatars.githubusercontent.com/u/2012282?v=3","gravatar_id":"","url":"https://api.github.com/users/vivienlacourba","html_url":"https://github.com/vivienlacourba","followers_url":"https://api.github.com/users/vivienlacourba/followers","following_url":"https://api.github.com/users/vivienlacourba/following{/other_user}","gists_url":"https://api.github.com/users/vivienlacourba/gists{/gist_id}","starred_url":"https://api.github.com/users/vivienlacourba/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vivienlacourba/subscriptions","organizations_url":"https://api.github.com/users/vivienlacourba/orgs","repos_url":"https://api.github.com/users/vivienlacourba/repos","events_url":"https://api.github.com/users/vivienlacourba/events{/privacy}","received_events_url":"https://api.github.com/users/vivienlacourba/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/vivienlacourba/trac-w3caccountsbundle/labels/account%20administration","name":"account administration","color":"0000aa"},{"url":"https://api.github.com/repos/vivienlacourba/trac-w3caccountsbundle/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/vivienlacourba/trac-w3caccountsbundle/milestones/16","html_url":"https://github.com/vivienlacourba/trac-w3caccountsbundle/milestones/0.1.14","labels_url":"https://api.github.com/repos/vivienlacourba/trac-w3caccountsbundle/milestones/16/labels","id":1605290,"number":16,"title":"0.1.14","description":"Account revalidation:\r\n\r\n * Ensure password strength\r\n * Scripts to be able to mail a user asking him to update his account\r\n * Scripts to lock and disable accounts","creator":{"login":"vivienlacourba","id":2012282,"avatar_url":"https://avatars.githubusercontent.com/u/2012282?v=3","gravatar_id":"","url":"https://api.github.com/users/vivienlacourba","html_url":"https://github.com/vivienlacourba","followers_url":"https://api.github.com/users/vivienlacourba/followers","following_url":"https://api.github.com/users/vivienlacourba/following{/other_user}","gists_url":"https://api.github.com/users/vivienlacourba/gists{/gist_id}","starred_url":"https://api.github.com/users/vivienlacourba/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vivienlacourba/subscriptions","organizations_url":"https://api.github.com/users/vivienlacourba/orgs","repos_url":"https://api.github.com/users/vivienlacourba/repos","events_url":"https://api.github.com/users/vivienlacourba/events{/privacy}","received_events_url":"https://api.github.com/users/vivienlacourba/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":1,"state":"closed","created_at":"2016-02-25T14:17:06Z","updated_at":"2016-02-25T15:41:23Z","due_on":"2013-10-15T00:00:00Z","closed_at":"2016-02-25T14:17:06Z"},"comments":0,"created_at":"2016-02-25T15:41:23Z","updated_at":"2016-02-25T15:41:23Z","closed_at":null,"body":"**Reported by vivien on 25 Sep 2013 23:53 UTC**\nWhen a user set a new password we need to check its strength.\r\n\r\nCurrently we are only looking at the min length which is not enough to ensure teh use of a strong password.\r\n\r\nAlso their should be a password strength meter and clear indication of password syntax requirements to guide the user when he is asked to choose a new password.\r\n\r\nLinks to study:\r\n\r\n * [OWASP's Authentication Cheat Sheet / Password Strength guidelines](https://www.owasp.org/index.php/Authentication_Cheat_Sheet#Implement_Proper_Password_Strength_Controls)\r\n * https://github.com/jbafford/PasswordStrengthBundle\r\n * Power PWChecker  jQuery Strong Password Plugin ([link1](http://dev.dbl-a.com/jquery/power-pwchecker-jquery-strong-password-plugin/)) ([link2](http://www.egrappler.com/jquery-strong-password-plugin-power-pwchecker/))\r\n *"}}