{"action":"created","issue":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/980","labels_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/980/labels{/name}","comments_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/980/comments","events_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/980/events","html_url":"https://github.com/freedomofpress/securedrop/issues/980","id":66238776,"number":980,"title":"Add password validation during user creation","user":{"login":"conorsch","id":657862,"avatar_url":"https://avatars.githubusercontent.com/u/657862?v=3","gravatar_id":"","url":"https://api.github.com/users/conorsch","html_url":"https://github.com/conorsch","followers_url":"https://api.github.com/users/conorsch/followers","following_url":"https://api.github.com/users/conorsch/following{/other_user}","gists_url":"https://api.github.com/users/conorsch/gists{/gist_id}","starred_url":"https://api.github.com/users/conorsch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/conorsch/subscriptions","organizations_url":"https://api.github.com/users/conorsch/orgs","repos_url":"https://api.github.com/users/conorsch/repos","events_url":"https://api.github.com/users/conorsch/events{/privacy}","received_events_url":"https://api.github.com/users/conorsch/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-04-03T22:17:59Z","updated_at":"2015-04-08T04:42:30Z","closed_at":null,"body":"Currently the application permits empty strings for passwords during account creation. This affects account creation via both `manage.py` in the CLI and the web interface. At a minimum the app should check for empty strings and prompt again. Better yet, the app should enforce a minimum password strength via regex.\r\n\r\nWe also need tests to confirm this functionality (rejecting weak passwords) once it's added."},"comment":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/comments/90800651","html_url":"https://github.com/freedomofpress/securedrop/issues/980#issuecomment-90800651","issue_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/980","id":90800651,"user":{"login":"abbynormative","id":6013096,"avatar_url":"https://avatars.githubusercontent.com/u/6013096?v=3","gravatar_id":"","url":"https://api.github.com/users/abbynormative","html_url":"https://github.com/abbynormative","followers_url":"https://api.github.com/users/abbynormative/followers","following_url":"https://api.github.com/users/abbynormative/following{/other_user}","gists_url":"https://api.github.com/users/abbynormative/gists{/gist_id}","starred_url":"https://api.github.com/users/abbynormative/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/abbynormative/subscriptions","organizations_url":"https://api.github.com/users/abbynormative/orgs","repos_url":"https://api.github.com/users/abbynormative/repos","events_url":"https://api.github.com/users/abbynormative/events{/privacy}","received_events_url":"https://api.github.com/users/abbynormative/received_events","type":"User","site_admin":false},"created_at":"2015-04-08T04:42:30Z","updated_at":"2015-04-08T04:42:30Z","body":"I added a quick fix for this but you may want to use Cracklib instead or as well because they have a dictionary checker. https://pypi.python.org/pypi/cracklib"}}