balance-open
balance-open copied to clipboard
balance-io
User Profile UI
We want Balance users. We need a graphical representation of the user with its data.
Maybe we need some of the current app "preferences" to be moved inside the user profile as well.
Should you wish to assign usernames to users, this is a great resource - https://gist.github.com/caseyohara/1453705#file-reserved_usernames-rb-L10
➤ Ben Baron commented:
Some notes:
- Enforce password length client side (as server never sees password, only a hash)
- Minimum password length of 16 characters, no maximum length
- All unicode and ASCII chars supported
- Check passwords client side against a list of known bad passwords as best as possible without shipping gigabytes of bad password lists (potentially run a secure web service where we send some kind of password hash and check against known leaked passwords--need to discuss with Jin)
Great info on good password requirements here: https://nakedsecurity.sophos.com/2016/08/18/nists-new-password-rules-what-you-need-to-know/
Add UI that shows warning after 2 failed attempts. Should say something like "Failed login 2 times, after 10 times your account will be locked for one hour for security" or something like that.
Eventually the number 10 will be a shared constant in the client/server shared framework.
Needs a bunch of backend support that isn't written yet. Bumping to 1.0.1.