gophish/auth
Jordan Wright bb7de8df3e
Initial Implementation of a Password Policy (#1867)
This PR adds the initial work to implement a password policy as defined in #1538.

Specifically, this implements the following

* Rate limiting for the login handler
* Implementing the ability for system admins to require a user to reset their password
* Implementing a password policy that requires passwords to be a minimum of 8 characters
* Removes the default password (gophish) for admin users to instead have the password randomly generated when Gophish first starts up
* Adds a password strength meter when choosing a new password

Fixes #1538
2020-06-19 22:03:51 -05:00
..
auth.go Initial Implementation of a Password Policy (#1867) 2020-06-19 22:03:51 -05:00
auth_test.go Initial Implementation of a Password Policy (#1867) 2020-06-19 22:03:51 -05:00
doc.go Major refactoring - created auth, config, models, controllers, and middleware packages. Should help provide modularity and a clean architecture. 2014-01-09 00:42:05 -06:00