Merge branch 'master' into group-view

CHANGELOG.md

@@ -10,7 +10,7 @@
 * add a readonly input field under email for showing the email domain*
 * Add "custom_users" key to config file, to be used with various scripts
 * Separate global overview from individual group view in admin group management
-
+* Allow accents in user's first and last names
 
 ## 1.4.31 (2024-09-27)
 
@@ -22,6 +22,16 @@
 
 ## 1.4.30 (2024-08-02)
 
+* Password enhancement
+  * Add an eye for visible/hidden on the password field in login/profile page
+  * Disable "update password" button until both fields are entered on profile page
+  *  Centered input fields
+  *  Added dynamic rules requirements in order for user to know what to add to his password
+  *  Password rules is 12 char, with 1 spec char, 1 digit and no spaces
+  *  Updated generated password via generate-password to 12 when account activated
+  *  Updated also db user password generated to 12
+  *  Added a red cross/green tick in the input for passwork and password confirmation
+
 * Added a `project.terms_and_conditions_hds` setting in the config:
   If true:
     "Ask Admin" button to submit project creation form became available after 'project name' and 'expiration date' are filled, 'project description' is at least 30 char and a checkbox appears and 'terms and conditions hds' should also be checked

bin/my-accounts.js

@@ -78,7 +78,7 @@ program
                 process.exit(1);                
             }
 
-            let new_password = usrv.new_password(8);
+            let new_password = usrv.new_password(16);
             user.password = new_password;
             let fid = new Date().getTime();
             try {

core/tps.service.js

@@ -146,7 +146,7 @@ async function create_tp_users_db (owner, quantity, duration, end_date, userGrou
                 expiration: end_date + 1000*3600*24*(duration+CONFIG.tp.extra_expiration),
             };
             user = await usrsrv.create_user(user);
-            user.password = usrsrv.new_password(10);
+            user.password = usrsrv.new_password(16);
             await usrsrv.activate_user(user);
 
             users.push(user);

core/user.service.js

@@ -85,7 +85,7 @@ function get_user_home(user) {
 
 async function activate_user(user, action_owner = 'auto') {
     if (!user.password) {
-        user.password = new_password(10);
+        user.password = new_password(16);
         //user.password = Math.random().toString(36).slice(-10);
     }
     if (!user.created_at) {
@@ -217,7 +217,7 @@ async function create_user(user, action_owner = 'auto') {
 // todo should be factorysed with "normal" user creation
 async function create_extra_user(user_name, group, internal_user){
     //let password = Math.random().toString(36).slice(-10);
-    let password = new_password(10);
+    let password = new_password(16);
     if(process.env.MY_ADMIN_PASSWORD){
         password = process.env.MY_ADMIN_PASSWORD;
     }

core/user_db.service.js

@@ -104,7 +104,7 @@ async function create_db(new_db, user, id) {
     }
 
     //let password = Math.random().toString(36).slice(-10);
-    let password = usrsrv.new_password(10);
+    let password = usrsrv.new_password(16);
     let createuser = `CREATE USER '${id}'@'%' IDENTIFIED BY '${password}';\n`;
     try {
         await querydb(createuser);

manager2/src/app/auth/login/login.component.css

@@ -27,13 +27,14 @@
     z-index: 2;
 }
 
-.form-signin input[type="text"]
+#sign_user_id
 {
     margin-bottom: -1px;
     border-bottom-left-radius: 0;
     border-bottom-right-radius: 0;
 }
-.form-signin input[type="password"]
+
+#sign_password
 {
     margin-bottom: 10px;
     border-top-left-radius: 0;
@@ -46,4 +47,31 @@
     font-size: 18px;
     font-weight: 400;
     display: block;
-}
+}
+
+.password-field {
+    position: relative;
+}
+
+.password-field .password-input {
+    width: 100%;
+    padding-right: 2rem; 
+}
+
+.password-field .toggle-password {
+    position: absolute;
+    top: 50%;
+    right: 1rem; 
+    transform: translateY(-50%);
+    cursor: pointer;
+    color: #aaa;
+}
+
+.password-field .toggle-password:hover {
+    color: #333;
+}
+
+/* Prevent icon from disappearing when input is focused */
+.password-field:focus-within .toggle-password {
+    z-index: 9;
+  }

manager2/src/app/auth/login/login.component.html

@@ -9,20 +9,53 @@ <h1 class="text-center login-title"><strong>Sign in to access your account</stro
         <div *ngIf="! double_auth">
             <form class="form-signin form-group">
                 <div class="form-group">
-                    <input [ngModelOptions]="{standalone: true}" [(ngModel)]="userId" id="sign_user_id" type="text" class="form-control" placeholder="User id" autocomplete="username" required autofocus>
+                    <input
+                        [ngModelOptions]="{standalone: true}"
+                        [(ngModel)]="userId"
+                        id="sign_user_id"
+                        type="text"
+                        class="form-control"
+                        placeholder="User id"
+                        autocomplete="username"
+                        required
+                        autofocus
+                    />
                 </div>
-                <div class="form-group">
-                    <input [ngModelOptions]="{standalone: true}" [(ngModel)]="password" id="sign_password" type="password" placeholder="Password" class="form-control" autocomplete="current-password" required>
+                <div class="form-group password-field">
+                    <input
+                        [ngModelOptions]="{standalone: true}"
+                        [(ngModel)]="password"
+                        [type]="passwordVisible ? 'text' : 'password'"
+                        id="sign_password"
+                        placeholder="Password"
+                        class="form-control password-input"
+                        autocomplete="current-password"
+                        required
+                    />
+                    <i
+                        class="toggle-password pi"
+                        [ngClass]="passwordVisible ? 'pi-eye-slash' : 'pi-eye'"
+                        (click)="togglePasswordVisibility()"
+                        aria-label="Toggle password visibility"
+                        role="button"
+                        tabindex="0"
+                    ></i>          
                 </div>
                 <div class="form-group">
-                    <button class="p-button p-button-lg p-button-primary btn-block" [ngStyle]="{'display': 'block'}" type="submit" (click)="login()">
-                        Sign in</button>
+                    <button
+                        class="p-button p-button-lg p-button-primary btn-block"
+                        [ngStyle]="{ display: 'block' }"
+                        type="submit"
+                        (click)="login()"
+                    >
+                        Sign in
+                    </button>
                 </div>
-                <div class="alert alert-warning" *ngIf="msg">{{msg}}</div>
+                <div class="alert alert-warning" *ngIf="msg">{{ msg }}</div>
                 <div class="form-group">
-                    <span class="lost">Lost your password?</span><button class="btn btn-sm" (click)="password_reset_request()">RESET</button>
+                    <span class="lost">Lost your password?</span>
+                    <button class="btn btn-sm" (click)="password_reset_request()">RESET</button>
                 </div>
-
             </form>
         </div>
             <div *ngIf="double_auth">

manager2/src/app/auth/login/login.component.ts

@@ -29,6 +29,7 @@ export class LoginComponent implements OnInit {
     msg: string
     error_msg: string
     msgstatus: number
+    passwordVisible: boolean = false
 
     u2f: any
     uid: string
@@ -170,4 +171,8 @@ export class LoginComponent implements OnInit {
         });
     }
 
+    togglePasswordVisibility() {
+        this.passwordVisible = !this.passwordVisible;
+      }
+
 }

manager2/src/app/auth/register/register.component.ts

@@ -142,7 +142,7 @@ export class RegisterComponent implements OnInit {
             this.msg="User identifier too short (min 4 characters)";
             return;
         }
-        if (!this.first_name.match(/^[a-zA-Z]+$/) || !this.last_name.match(/^[a-zA-Z]+$/)) {
+        if (!this.first_name.match(/^[a-zA-Zà-ü]+$/) || !this.last_name.match(/^[a-zA-Zà-ü]+$/)) {
             this.msg = 'Name contains unauthorized characters';
             return;
         }

manager2/src/app/user/user.component.css

@@ -0,0 +1,68 @@
+
+.valid-indicator {
+    color: green;
+}
+
+.invalid-indicator {
+    color: red;
+}
+
+.invalid-feedback {
+    color: red;
+}
+
+.password-rules {
+    margin-top: 10px;
+}
+
+.rule-satisfied {
+    color: green;
+}
+
+.rule-not-satisfied {
+    color: red;
+}
+
+.btn-disabled {
+    background-color: #d6d6d6;
+    border-color: #d6d6d6;
+    cursor: not-allowed;
+    pointer-events: none;
+    color: #888888;
+}
+
+.btn-disabled:hover {
+    background-color: #d6d6d6;
+    border-color: #d6d6d6;
+}
+
+.password-field {
+    position: relative;
+}
+
+.password-field .password-input {
+    width: 100%;
+    padding-right: 2rem; 
+}
+
+.password-field .toggle-password {
+    position: absolute;
+    top: 50%;
+    right: 1rem; 
+    transform: translateY(-50%);
+    cursor: pointer;
+    color: #aaa;
+}
+
+.password-field:has(.input-group-append .valid-indicator, .input-group-append .invalid-indicator) .toggle-password {
+    right: 3rem;
+}
+
+.password-field .toggle-password:hover {
+    color: #333;
+}
+
+/* Prevent icon from disappearing when input is focused */
+.password-field:focus-within .toggle-password {
+    z-index: 9;
+  }