ebbe.bass/ping-mee-self-service-platform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: harden password change after code review

Browse Source 
Count and audit a wrong current password found at change time, log the unclear outcome with its details and end the other sessions as far as possible, note a lockout threshold of 1 in the audit, skip the local hints when the fine-grained policy cannot be read, round the minimum age up, reset the form after back navigation, give error messages unique ids, and fix the German rejection text. Adds tests for the block length, the masked password fields and the new cases; the review findings are recorded in the plan and the deferred work.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FocPJ75XPma7TcuYEMy8zm
This commit is contained in:
Ebbe Baß
2026-10-19 08:23:33 +02:00
co-authored by Claude Sonnet 5.5
parent 49c7fd4a0b
commit ae4b30ec22
7 changed files with 218 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
portal/locale/de/LC_MESSAGES/django.po
+1 -1
View File
@@ -160,7 +160,7 @@ msgid "The current password is not correct."
msgstr "Das aktuelle Passwort ist nicht korrekt."
msgid "The new password does not meet the rules above, or it was used or changed too recently."
msgstr "Das neue Passwort erfüllt die oben genannten Regeln nicht, wurde schon einmal verwendet oder kommt zu kurz nach der letzten Änderung."
msgstr "Das neue Passwort erfüllt die oben genannten Regeln nicht, wurde schon einmal verwendet oder das Passwort wurde erst vor Kurzem geändert."
msgid "Please fill in this field."
msgstr "Bitte füllen Sie dieses Feld aus."