Contrib.social

Password Username Policy is not working properly with this module.

Open on Drupal.org →
Created on 19 August 2024, 8 months ago
Updated 20 August 2024, 8 months ago

Problem/Motivation

If we are enabling the Password Username Policy which comes with the password policy module along with this password separate form module then the username policy is always failing.

Steps to reproduce

  1. Enable the password_policy, change_pwd_page, password_policy_username modules.
  2. Set the username constraints for the password policy.
  3. Try to change the password with a new password that does not containing the username.
  4. Check whether the password validation is properly working or not.

Proposed resolution

As per my debugging, this is happening because of this following line in the password_policy module.

I think we have to add the name in the change_pwd_form form as we have done for the roles. (ref lines)

🐛 Bug report
Status

Active

Version

2.0

Component

Code

Created by

🇮🇳India rajdip_755 kolkata

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

  • Issue created by @rajdip_755
  • Merge request !14Issue #3468935 by Rajdip_755: Fix the Password Username Policy module compatibility. → (Open) created by rajdip_755
  • Status changed to Needs review 8 months ago
  • Comment 8 months ago →
    🇮🇳India rajdip_755 kolkata
  • Comment 7 months ago →
    🇮🇳India atul_ghate

    I have verifed this issue and applied MR!14 and it resolved mentioned issue. before patch it was showing i validation message withut chekcing value in the field if we enter pass withthout containng user name till it was showing username validation failure bcz it need account name to check validation MR14 added this account name value not its is showing a error only when there username is used as pass I have verified this issue and applied MR14, which resolved the mentioned issue. Before the patch, a validation message was displayed without checking the value in the field. Even if we entered a password without the username, it still showed a username validation failure because the account name was needed for the validation check. MR14 added the account name value, and now it correctly shows an error only when the username is used as part of the password (see the attached video for refrence)

  • Status changed to RTBC about 1 month ago
  • Comment about 1 month ago →
    🇷🇺Russia qzmenko Novosibirsk

    I confirming patch solved problem for me.

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024