Uploaded image for project: 'mod-password-validator'
  1. mod-password-validator
  2. MODPWD-51

Implement a bad password list(s)

    XMLWordPrintable

Details

    • eHoldings Sprint 98, eHoldings Sprint 101, eHoldings Sprint 102, eHoldings Sprint 103
    • 5
    • Spitfire
    • Backend analysis to identify options. In addition to implementation.

    Description

      As a system administrator,
      I want to validate passwords created/reset/changed
      So that I minimize any efforts to illegal access and attack/harm Folio

      Requirement

      Acceptance Criteria

      Given I need to set/change/reset my password
      When I enter a password that is on the bad password/specified dictionary list(s)
      Then display a message that the password is invalid AND do not allow the password to be saved

      Update: A spike (MODLOGIN-35) was created to find the approach for this functionality. It was completed, and the result was that the online service https://haveibeenpwned.com/Passwords could be used to obtain the list of the bad passwords.

      TestRail: Results

        Attachments

          Issue Links

            clones

            Story - Created by Jira Software - do not edit or delete. Issue type for a user story. MODLOGIN-35 Select a bad password list(s)

            • P3 - low priority level, item will be considered for inclusion in the next dev cycle
            • Closed
            has to be done after

            Story - Created by Jira Software - do not edit or delete. Issue type for a user story. MODPWD-41 Create a basis to migrate the module to Spring

            • P3 - low priority level, item will be considered for inclusion in the next dev cycle
            • Closed
            is blocked by

            Task - A task that needs to be done. FOLIO-2911 Docker image is not created by Jenkins build due to file copying issue

            • P2 - normal priority level, must be included in the current development cycle
            • Closed
            is required by

            New Feature - New feature requests UXPROD-2462 Local Password Management | Implement bad password list

            • P3 - low priority level, item will be considered for inclusion in the next dev cycle
            • Closed
            relates to

            Story - Created by Jira Software - do not edit or delete. Issue type for a user story. MODPWD-34 Trivial password rule

            • P3 - low priority level, item will be considered for inclusion in the next dev cycle
            • Closed

            Task - A task that needs to be done. MODPWD-49 Discover tools/libraries to support PostgreSQL DB in Spring integration tests

            • P3 - low priority level, item will be considered for inclusion in the next dev cycle
            • Closed

            Task - A task that needs to be done. MODPWD-50 Cover new Spring module code with unit tests

            • P3 - low priority level, item will be considered for inclusion in the next dev cycle
            • Closed

            Story - Created by Jira Software - do not edit or delete. Issue type for a user story. MODLOGIN-38 Technical Design: Local Password Rules Parameters/Configuration

            • P3 - low priority level, item will be considered for inclusion in the next dev cycle
            • Closed

            Story - Created by Jira Software - do not edit or delete. Issue type for a user story. MODLOGIN-57 Create password validation rules (RegEx)

            • P3 - low priority level, item will be considered for inclusion in the next dev cycle
            • Closed

            New Feature - New feature requests UXPROD-39 Local password management

            • P2 - normal priority level, must be included in the current development cycle
            • Closed

            Activity

              People

                dmtkachenko Dmytro Tkachenko
                kgambrell Khalilah Gambrell
                Votes:
                0 Vote for this issue
                Watchers:
                8 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  TestRail: Runs

                    TestRail: Cases