{"action":"created","issue":{"url":"https://api.github.com/repos/plataformatec/devise/issues/4853","repository_url":"https://api.github.com/repos/plataformatec/devise","labels_url":"https://api.github.com/repos/plataformatec/devise/issues/4853/labels{/name}","comments_url":"https://api.github.com/repos/plataformatec/devise/issues/4853/comments","events_url":"https://api.github.com/repos/plataformatec/devise/issues/4853/events","html_url":"https://github.com/plataformatec/devise/issues/4853","id":318503274,"number":4853,"title":"Default password range should be adjusted to comply with NIST standards","user":{"login":"lancecarlson","id":107,"avatar_url":"https://avatars0.githubusercontent.com/u/107?v=4","gravatar_id":"","url":"https://api.github.com/users/lancecarlson","html_url":"https://github.com/lancecarlson","followers_url":"https://api.github.com/users/lancecarlson/followers","following_url":"https://api.github.com/users/lancecarlson/following{/other_user}","gists_url":"https://api.github.com/users/lancecarlson/gists{/gist_id}","starred_url":"https://api.github.com/users/lancecarlson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lancecarlson/subscriptions","organizations_url":"https://api.github.com/users/lancecarlson/orgs","repos_url":"https://api.github.com/users/lancecarlson/repos","events_url":"https://api.github.com/users/lancecarlson/events{/privacy}","received_events_url":"https://api.github.com/users/lancecarlson/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-04-27T18:19:57Z","updated_at":"2018-05-28T21:35:55Z","closed_at":"2018-05-28T21:35:55Z","author_association":"CONTRIBUTOR","body":"## Current behavior\r\n\r\n```ruby\r\n  # ==> Configuration for :validatable\r\n  # Range for password length.\r\nconfig.password_length = 6..128\r\n```\r\n\r\n## Expected behavior\r\n\r\n```ruby\r\n  # ==> Configuration for :validatable\r\n  # Range for password length.\r\nconfig.password_length = 8..1000\r\n```\r\n\r\nThe minimum value should be 8 characters. The max value should be much higher than 128. Maybe 255? I don't see any reason why you would want to limit users on the max length (perhaps within 1000 characters), especially if they're using 3rd party password generator tools.\r\n\r\nI can file a PR with this change depending on what people decide makes the most sense!\r\n"},"comment":{"url":"https://api.github.com/repos/plataformatec/devise/issues/comments/392606771","html_url":"https://github.com/plataformatec/devise/issues/4853#issuecomment-392606771","issue_url":"https://api.github.com/repos/plataformatec/devise/issues/4853","id":392606771,"user":{"login":"tegon","id":3727827,"avatar_url":"https://avatars0.githubusercontent.com/u/3727827?v=4","gravatar_id":"","url":"https://api.github.com/users/tegon","html_url":"https://github.com/tegon","followers_url":"https://api.github.com/users/tegon/followers","following_url":"https://api.github.com/users/tegon/following{/other_user}","gists_url":"https://api.github.com/users/tegon/gists{/gist_id}","starred_url":"https://api.github.com/users/tegon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tegon/subscriptions","organizations_url":"https://api.github.com/users/tegon/orgs","repos_url":"https://api.github.com/users/tegon/repos","events_url":"https://api.github.com/users/tegon/events{/privacy}","received_events_url":"https://api.github.com/users/tegon/received_events","type":"User","site_admin":false},"created_at":"2018-05-28T21:35:55Z","updated_at":"2018-05-28T21:35:55Z","author_association":"MEMBER","body":"The password length is configurable, so you can change it to what better fit your needs. \r\nChanging this default now can be a pain for backward compatibility, so I think we should keep as it is today."}}
{"actor":{"display_login":"tegon"}}