Ensure reset password has at least the minimal length for password

Closes #12028
2023-04-11 00:08:28 +02:00
parent 2fa03cc26c
commit a826d91015
1 changed files with 1 additions and 0 deletions
@@ -306,6 +306,7 @@ class User(avatar_mixin(100, 'login'), DeactivableMixin, ModelSQL, ModelView):
    @classmethod
    @ModelView.button
    def reset_password(cls, users, length=8, from_=None):
+        length = max(length, config.getint('password', 'length', default=0))
        for user in users:
            user.password_reset = gen_password(length=length)
            user.password_reset_expire = (