Registration
(GitLab+Jenkins) : Unmatched GitLab Password Constraints in a failing registration do not produce a conclusive error message
#6477
Labels
Describe the bug
This is closely related to #6457.
In a setup with GitLab and Jenkins, the weak password policy of GitLab is a lot more strict than the one in Artemis. Passwords in Artemis require no (partial) matches to parts of the username and the corresponding mail address as well as matches to known, breached passwords or other predictable words.
When a user wants to register and fails to comply with the password policy of GitLab, the error message states
Registration failed! Please try again later
. This is not a comprehensible error message for this case since it does not tell the user that their password is too weak or even the problem but implies a problem on the server-side and suggest to try again later with possibly the same potential credentials.To Reproduce
/account/register
)username: username/password: username
Expected behavior
Artemis only states that
Your password is required to be at least 8 characters.
. When running the application with Gitlab, upon trying to register with a weak password an error message pointing to this cause should be displayed.Furthermore, when entering a password (or even before that), the password policy should state some information regarding how to choose a strong password according to GitLab's standards.
Screenshots
No response
Which version of Artemis are you seeing the problem on?
6.1.3
What browsers are you seeing the problem on?
Chrome, Firefox
Additional context
The stack trace below is the result of trying to register as user
myusername
with passwordmyusername
.Relevant log output
The text was updated successfully, but these errors were encountered: