Browse Source

Merge pull request #14069 from overleaf/jpa-server-pro-default-pw-max

[server-ce] config: align default max password length with bcrypt limit

GitOrigin-RevId: 486f1d789048f232d1e5e0059d9e4ad30b78b06c
Jakob Ackermann 3 years ago
parent
commit
c287774f87
1 changed files with 1 additions and 1 deletions
  1. 1 1
      server-ce/config/settings.js

+ 1 - 1
server-ce/config/settings.js

@@ -397,7 +397,7 @@ if (
     pattern: process.env.SHARELATEX_PASSWORD_VALIDATION_PATTERN || 'aA$3',
     pattern: process.env.SHARELATEX_PASSWORD_VALIDATION_PATTERN || 'aA$3',
     length: {
     length: {
       min: process.env.SHARELATEX_PASSWORD_VALIDATION_MIN_LENGTH || 8,
       min: process.env.SHARELATEX_PASSWORD_VALIDATION_MIN_LENGTH || 8,
-      max: process.env.SHARELATEX_PASSWORD_VALIDATION_MAX_LENGTH || 150,
+      max: process.env.SHARELATEX_PASSWORD_VALIDATION_MAX_LENGTH || 72,
     },
     },
   }
   }
 }
 }