DGNum/demarches-normaliennes
13
1
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

superadmin: check complexity password server side

Browse source
This commit is contained in:
Christophe Robillard 2020-11-17 17:11:04 +01:00 • committed by simon lehericey
parent 94b3ec942b
commit 15a395fbc7
4 changed files with 59 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
app/models/super_admin.rb
View file

@ -28,6 +28,14 @@ class SuperAdmin < ApplicationRecord
devise :rememberable, :trackable, :validatable, :lockable, :async, :recoverable,
:two_factor_authenticatable, :otp_secret_encryption_key => Rails.application.secrets.otp_secret_key
validate :password_complexity, if: -> (u) { Devise.password_length.include?(u.password.try(:size)) }
def password_complexity
if password.present? && ZxcvbnService.new(password).score < PASSWORD_COMPLEXITY_FOR_ADMIN
errors.add(:password, :not_strong)
end
end
def enable_otp!
self.otp_secret = SuperAdmin.generate_otp_secret
self.otp_required_for_login = true