summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorgumi <git@gumi.ca>2020-03-03 20:44:12 -0500
committergumi <git@gumi.ca>2020-03-03 20:44:12 -0500
commit2df2f8a3f9eafdf1a28ce458a874135d666d0cf9 (patch)
tree4bc4f09ba23bffefe7cae1e1ada87760344745db
parentf95e97717cdcdb0fa030e784c30b21aa1c04c5e6 (diff)
downloadapi-2df2f8a3f9eafdf1a28ce458a874135d666d0cf9.tar.gz
api-2df2f8a3f9eafdf1a28ce458a874135d666d0cf9.tar.bz2
api-2df2f8a3f9eafdf1a28ce458a874135d666d0cf9.tar.xz
api-2df2f8a3f9eafdf1a28ce458a874135d666d0cf9.zip
tmwa accounts can have 4-character passwords (yes, it's dumb)
-rw-r--r--src/routers/vault/middlewares/legacy/account.js2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/routers/vault/middlewares/legacy/account.js b/src/routers/vault/middlewares/legacy/account.js
index 83048e3..dddabdb 100644
--- a/src/routers/vault/middlewares/legacy/account.js
+++ b/src/routers/vault/middlewares/legacy/account.js
@@ -5,7 +5,7 @@ const flatfile = require("../../utils/flatfile.js");
const regexes = {
token: /^[a-zA-Z0-9-_]{6,128}$/, // UUID
- any23: /^[^\s][^\t\r\n]{6,21}[^\s]$/, // tmwa password (this looks scary)
+ any23: /^[^\s][^\t\r\n]{2,21}[^\s]$/, // tmwa password (this looks scary)
any30: /^[^\s][^\t\r\n]{6,28}[^\s]$/, // herc password (this looks scary)
alnum23: /^[a-zA-Z0-9_]{4,23}$/, // mostly for username
gid: /^[23][0-9]{6}$/, // account id