Merge pull request #5359 from overleaf/jpa-web-passwordStrengthOptions

[web] add defaults for passwordStrengthOptions into the server-ce config

GitOrigin-RevId: 69f4aec55219cd349fed861c766c135481b2bfea

services/web/config/settings.defaults.js

@@ -418,11 +418,13 @@ module.exports = {
   // -----------
   // These restrict the passwords users can use when registering
   // opts are from http://antelle.github.io/passfield
-  // passwordStrengthOptions:
-  // 	pattern: "aA$3"
-  // 	length:
-  // 		min: 6
-  // 		max: 128
+  passwordStrengthOptions: {
+    length: {
+      min: 6,
+      // Bcrypt does not support longer passwords than that.
+      max: 72,
+    },
+  },
 
   // Email support
   // -------------