ebbe.bass/ping-mee-self-service-platform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: read the lockout threshold and window in the password policy

Browse Source 
The password change must stay below the domain's lockout threshold. The policy now carries lockout_threshold and lockout_window, from the domain or from the fine-grained policy that applies. AD-2's read allow-list names the new attributes.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01N3t4WL7bd9bdHHNjEsxzqC
This commit is contained in:
ebbe.bass
2026-10-18 09:55:10 +02:00
co-authored by Claude Sonnet 5.5
parent ead56709bc
commit b87ffae94c
7 changed files with 24 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
portal/tests/test_directory_live.py
+1
View File
@@ -70,6 +70,7 @@ def test_other_attributes_are_refused(live):
def test_password_policy_is_returned(live):
policy = live.password_policy("ptest-user1")
assert policy.min_length >= 0
assert policy.lockout_threshold >= 0 # 0: the domain never locks accounts
def test_verify_password(live):