Feedback-ID: i0fe9450f:Fastmail
Date: Wed, 20 Nov 2024 07:45:40 +0900
From: Michael Paquier <michael@paquier.xyz>
To: Tomas Vondra <tomas@vondra.me>
Cc: Emanuele Musella <emamuse86@gmail.com>,
	pgsql-hackers@lists.postgresql.org
Subject: Re: Parametrization minimum password lenght
Message-ID: <Zz0VFNPmIkn_dRcV@paquier.xyz>
References: <CA+ugDNyYtHOtWCqVD3YkSVYDWD_1fO8Jm_ahsDGA5dXhbDPwrQ@mail.gmail.com>
 <5702ea42-3599-4062-bd15-3e3c7cc67e6e@vondra.me>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="Uq0bRQmXeTCdc0je"
Content-Disposition: inline
In-Reply-To: <5702ea42-3599-4062-bd15-3e3c7cc67e6e@vondra.me>
Archived-At: <https://www.postgresql.org/message-id/Zz0VFNPmIkn_dRcV%40paquier.xyz>
Precedence: bulk


--Uq0bRQmXeTCdc0je
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Tue, Nov 12, 2024 at 02:48:28PM +0100, Tomas Vondra wrote:
> Thanks for the patch, seems like a useful feature. Please add the patch
> to the next commitfest (2025-01) at https://commitfest.postgresql.org/

FYI, I have a large set of such things in my own repo with a clone of
passwordcheck:
https://github.com/michaelpq/pg_plugins/tree/main/passwordcheck_extra

Not all of them may be useful, still the minimal length is one of
them:
- passwordcheck_extra.special_chars, to define a list of special characters
  with the password needing at least one. Default is "!@#$%^&*()_+{}|<>?=".
- passwordcheck_extra.restrict_lower, to enforce the use of at least one
  lower-case character.
- passwordcheck_extra.restrict_upper, to enforce the use of at least one
  upper-case character.
- passwordcheck_extra.restrict_numbers, to enforce the use of at least
  one number.
- passwordcheck_extra.restrict_special, to enforce the use of at least
  one special character listed in \"passwordcheck_extra.special_chars\".
- passwordcheck_extra.minimum_length, minimum length of password allowed.
  Default is 8, which likely sucks.
- passwordcheck_extra.maximum_length, maximum length of password allowed.
  Default is 15, which definitely sucks, but it is useful for tests.

I would not mind if you just copy-paste some of this stuff, and the
code is released under the PostgreSQL license.  Feel free to not worry
about the authorship part as well, I'm fine even if my name is
discarded.
--
Michael

--Uq0bRQmXeTCdc0je
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=YtuB
-----END PGP SIGNATURE-----

--Uq0bRQmXeTCdc0je--