monica icon indicating copy to clipboard operation
monica copied to clipboard

Inconsistent password requirements

Open wunter8 opened this issue 1 year ago • 3 comments

⚠️ This issue respects the following points: ⚠️

  • [X] This is a bug, not a question or a configuration/webserver/proxy issue.
  • [X] This issue is not already reported on Github (I've searched it).
  • [X] I agree to follow Monica's Code of Conduct.

Bug description

I was testing Monica v5 and created an admin account with a password. I invited a user to that account and used the same password. The password was accepted just fine for the admin account, but it was rejected for the user account.

Steps to reproduce

  1. Register an admin account with the password Password1!
  2. Invite a user to the account
  3. Create the user account using the invite link in the email and use the password Password1!
  4. See the error message saying: "Whoops! Something went wrong. The password may only contain letters, numbers, and dashes."

Expected behavior

I would expect an admin account and a user account to have the same password requirements. (In this case, ! is accepted for admins but not invited users)

Environment

Your own self-hosted instance (v5 a.k.a chandler version or main branch)

Version of Monica

Version 5.0.0-beta.3 — commit cddf7f9.

Installation method

Docker image

Web server

None

Database engine version

None

Additional info

No response

wunter8 avatar Nov 25 '23 18:11 wunter8

Hey @wunter8 , may I ask how you created an admin account?

KiDxS avatar Dec 10 '23 06:12 KiDxS

I made the admin account just by going to mydomain.com/register

wunter8 avatar Dec 10 '23 13:12 wunter8

That's weird. I registered through /register for the first time before but it blocked Password1!.

This happened recently though. They might have fixed it.

KiDxS avatar Dec 14 '23 05:12 KiDxS