# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1539090765 -3600
# Node ID 3bc68057f23257178dc7f649226c90f731bc7833
# Parent  7cede636b3d5701e129bce8d7a796f5aff135008
mod_password_reset: Implement password policy enforcement (requires mod_password_policy)

diff -r 7cede636b3d5 -r 3bc68057f232 mod_password_reset/mod_password_reset.lua
--- a/mod_password_reset/mod_password_reset.lua	Tue Oct 09 14:12:03 2018 +0100
+++ b/mod_password_reset/mod_password_reset.lua	Tue Oct 09 14:12:45 2018 +0100
@@ -16,8 +16,9 @@
 
 local serve = module:depends"http_files".serve;
 
-module:depends"adhoc";
-module:depends"http";
+module:depends("adhoc");
+module:depends("http");
+local password_policy = module:depends("password_policy");
 
 local form_template = assert(module:load_resource("password_reset/password_reset.html")):read("*a");
 local result_template = assert(module:load_resource("password_reset/password_result.html")):read("*a");
@@ -38,6 +39,7 @@
 	return apply_template(form_template, {
 		jid = reset_info.user.."@"..module.host;
 		token = token;
+		min_password_length = password_policy.get_policy().length;
 	});
 end
 
@@ -54,6 +56,16 @@
 		return apply_template(result_template, { classes = "alert-danger", message = "This link has expired." })
 	end
 
+	local policy_ok, policy_err = password_policy.check_password(password);
+	if not policy_ok then
+		return apply_template(form_template, {
+			classes = "alert-danger", message = "Unsuitable password: "..policy_err;
+			jid = reset_info.user.."@"..module.host;
+			token = token;
+			min_password_length = password_policy.get_policy().length;
+		})
+	end
+
 	local ok, err = usermanager.set_password(reset_info.user, password, module.host);
 
 	if ok then
diff -r 7cede636b3d5 -r 3bc68057f232 mod_password_reset/password_reset/password_reset.html
--- a/mod_password_reset/password_reset/password_reset.html	Tue Oct 09 14:12:03 2018 +0100
+++ b/mod_password_reset/password_reset/password_reset.html	Tue Oct 09 14:12:45 2018 +0100
@@ -34,6 +34,7 @@
 								class="form-control"
 								autocomplete="new-password"
 								placeholder="new password"
+								minlength="{min_password_length}"
 							>
 						</div>
 					</div>