Password Tools 2.3.5

[Xon]

Notes

• I plan to port this to XF2.
• I'm not interested in implementing password expiry rules as they are a pain from a user's perspective.
  • Forced password resets maybe.
• I am interested in integration with pwned passwords support (optional).
  • This allows securely checking a password has likely been compromised without sharing the password.
  • See Validating Leaked Passwords with k-Anonymity for details. Warning; contains Maths.

 

[Freelancer]

Got this in the Browser Console:
[Error] Failed to load resource: the server responded with a status of 404 (HTTP/2.0 404) (zxcvbn.js.map, line 0)
Link is: https://www.mywebsite.com/js/KL/PasswordTools/zxcvbn.js.map

 

[Xon]

Xon updated Password Tools with a new update entry:

2.2.1 - Bugfix update

• Fixed that an older XML was used pointing at old code event listener files.

Read the rest of this update entry...

 

[Xon]

@Freelancer try downloading the 2.2.1 again, I think I've removed what is triggering that

 

[Alpha1]

• Sorry pre-IE11, go die in a fire.

Hahahaha!

 

[RSI]

@Freelancer try downloading the 2.2.1 again, I think I've removed what is triggering that

I also had a similar issue and was going to report it, but your last update just fixed it. On my registration page I have a Location: entry that gets auto-populated via another add-on and it was preventing it from being populated. Your last update fixed it so it must have been connected to the other guys issue too.
.

 

[Freelancer]

@Freelancer try downloading the 2.2.1 again, I think I've removed what is triggering that

Works now! Thanks!

 

[SeToY]

Small bug report:

Enforce password complexity for admins
When a user sets a user's password enforce the password complexity ruleset

Shouldn't that be "When an ADMIN sets a user's password"? Anyway thanks for keeping it maintained

 

[oman]

I am interested in integration with pwned passwords support (optional).

This..... sounds awesome.

 

[Xon]

This..... sounds awesome.

A little something (phrased of course).

 

[SeToY]

(phrased of course)

And with numeric styling, please!

Anyway this looks awesome and promising - thank you very much

 

[Xon]

And with numeric styling, please!

What do you mean by numerical styling? It is just a xenforo phrase with a count variable

 

[SeToY]

What do you mean by numerical styling?

Uhm, XenForo number formatting can be configured, such as thousand separators and decimal separators. So there doesn't appear "3000000" but "3.000.000" in germany or "3,000,000" in US cultures

 

[Xon]

Uhm, XenForo number formatting can be configured, such as thousand separators and decimal separators. So there doesn't appear "3000000" but "3.000.000" in germany or "3,000,000" in US cultures

Ah. I'll see if I can hit it with a stick to make it do that

 

[Xon]

Uhm, XenForo number formatting can be configured, such as thousand separators and decimal separators. So there doesn't appear "3000000" but "3.000.000" in germany or "3,000,000" in US cultures

It now sends {count} and {countFormatted} to the phrase

 

[Alpha1]

I tried this addon again. There are 4 thick lines under the password field (light skin)
The 'Too Short' message is partly visible. (not vertically centred in the field)

 

[Freelancer]

Below is the default (XF1) layout. It looks correct.





The thick lines are the "password strength meter" if you will. It must be your style that makes the "Too Short" only partially visible.

 

[Xon]

I've got some styling tweaks to apply, just fighting other fires atm.

 

[oman]

View attachment 170342

A little something (phrased of course).

View attachment 170345
It now sends {count} and {countFormatted} to the phrase

That's awesome! Will it prevent users from using the password or is it more acting as a notice? The option to prevent would be cool, but maybe you already thought of this or are planning it.

Also, is this coming to the XF 1.x version too?

 

[Xon]

Xon updated Password Tools with a new update entry:

2.3.4 - Feature Update. Pwned password integration

Thanks @WoodiE for funding the HIBP (pwned password) integration.

• Pwned password integration
  • This allows securely checking if a password has likely been compromised without sharing the password.
  • See Validating Leaked Passwords with k-Anonymity for details. Warning; contains Maths.
  • If the API fails, the password is...

Read the rest of this update entry...