gophish

Author	SHA1	Message	Date
Jordan Wright	23154126de	Made error handling in the case of a client IP without a port more graceful, so that the ratelimiter doesn't return an error if X-Forwarded-For or X-Real-IP is set.	2020-10-11 17:18:33 -05:00
Jordan Wright	bb7de8df3e	Initial Implementation of a Password Policy (#1867 ) This PR adds the initial work to implement a password policy as defined in #1538. Specifically, this implements the following * Rate limiting for the login handler * Implementing the ability for system admins to require a user to reset their password * Implementing a password policy that requires passwords to be a minimum of 8 characters * Removes the default password (gophish) for admin users to instead have the password randomly generated when Gophish first starts up * Adds a password strength meter when choosing a new password Fixes #1538	2020-06-19 22:03:51 -05:00

Author

SHA1

Message

Date

Jordan Wright

Made error handling in the case of a client IP without a port more graceful, so that the ratelimiter doesn't return an error if X-Forwarded-For or X-Real-IP is set.

2020-10-11 17:18:33 -05:00

Jordan Wright

bb7de8df3e

Initial Implementation of a Password Policy (#1867 )

This PR adds the initial work to implement a password policy as defined in #1538.

Specifically, this implements the following

* Rate limiting for the login handler
* Implementing the ability for system admins to require a user to reset their password
* Implementing a password policy that requires passwords to be a minimum of 8 characters
* Removes the default password (gophish) for admin users to instead have the password randomly generated when Gophish first starts up
* Adds a password strength meter when choosing a new password

Fixes #1538

2020-06-19 22:03:51 -05:00

2 Commits (81c979886d37edcd294815f296deab2a0daa1c6e)