fix: Increased minimum password length to 12 chars (CNIL)

roadiz · Jan 28, 2025 · 571ebd8 · 571ebd8
1 parent 5ad1f25
commit 571ebd8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/RoadizCoreBundle/src/Entity/User.php b/lib/RoadizCoreBundle/src/Entity/User.php
@@ -102,7 +102,7 @@ class User extends AbstractHuman implements UserInterface, AdvancedUserInterface
      * Plain password. Used for model validation.
      * **Must not be persisted.**.
      */
-    #[PasswordStrength(minStrength: 3, minLength: 8)]
+    #[PasswordStrength(minStrength: 3, minLength: 12)]
     #[Serializer\Groups(['user:write'])]
     #[Assert\NotBlank(groups: ['no_empty_password'])]
     private ?string $plainPassword = null;