lorthirk / kapua Goto Github PK

If user enters too large min password length, Kapua reports an error, which is OK, but the error message is wrong (it should be something similar to: "Value too small, it should be at least 12.")

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, change password.min.lenght to 1 (less than 12)
4. Try to submit changes - observe the error.

Expected behavior
Error message should be changed - see above.

Screenshots

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

Additional context
Add any other context about the problem here.

If user wants to change password (upper right field -> change password), the tooltip is not OK (see screenshot bellow).

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, change password.min.lenght to 15
4. Create a user with a valid password
5. Login as newly created user, go to upper right menu -> change password
6. Hover above the password/confirm password fields -> observe the tooltip.

Expected behavior
Tooltip sohuld be fixed.

Screenshot:

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

User can enter higher minimal password value than 255 (in this case 999999999).
So it is no possible to enter password, becasue the limit is 255.

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, change password.min.lenght to 999999999
4. Change infinite child users to True
5. Try to create a user - it is not possible, because min length pass is bigger than max length

Expected behavior
minimal password should be resticted to 254.

Screenshots

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

Password is visible in error message if it does not meet the requirements (see screenshot bellow).

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, change password.min.lenght to 255
4. Change infinite child users to True
5. Try to create a user with a valid password - observe the error

Expected behavior
Password should never be visible.

Screenshots

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

Additional context
Add any other context about the problem here.

Button in Mfa is not getting refreshed if user enables/disabled MFA, even if you change views to e.g. Devices or Tags. You have to press F5 in order to refresh it.

Testflow:

1. Login as kapua-sys or any other user that has proper permissions
2. Go to Users, create a user (e.g. user1)
3. Assgin user1 admin role
4. Login as user1, go to Users, select user1 and click on MFA tab
5. Open menu on upper right corner -> MFA -> click Enable
6. refresh the page by pressing F5
7. Go to Users, select user1 -> MFA
8. Click upper right menu, and disable the MFA
9. Change views from Users to e.g. Devices or Tags, return to Users, select user1 -> MFA
10. Observe the button for enabling/disabling MFA - it does not get refreshed even when views are changed.

Expected behavior
MFA button should change its "stateS" according to the MFA

Screenshots
/

Version of Kapua
1.3.0

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API
[ ] Message Broker
[ ] - Others

If user enters "." or "-" symbols in the min.password length field, Kapua reports an error that number is too large or should not be negative, etc. But "-" and "." should not be enterable anyway.

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, change password.min.lenght to -10 or 10.1 or 10-1
4. Observe the error

Expected behavior
"." and "-" symbols should not be enetarble in the field.

Screenshots

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

If you add two minus symbols before a number in min length password field, Kapua report that a number is too big, although you add e.g. --15.

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, change password.min.lenght to --15
4. Observe the error

Expected behavior
Error message should be different (e.g. negative values not allowed or something similar).

Screenshots

Version of Kapua
[e.g. 1.0.0]

Type of deployment
[ ] Local Vagrant deployment
[ ] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[ ] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API
[ ] Message Broker
[ ] - Others

Additional context
Add any other context about the problem here.

When user clicks on upper right corner to change password, 500 server error is shown (see screenshot bellow).

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, change password.min.lenght to 15
4. Create a user with a valid password, don't assign any permissions to it
5. Login as newly created user, go to upper right menu -> change password
6. Observe the server error

Expected behavior
there should be no 500 server error when clicking on upper right corner.

Screenshot:

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

If user enters min password length < 12, Kapua reports an error, and the value is not saved.
But if user changes view to e.g. UserService and comes back, you can see that the value is saved.

Nevertheless, when you navigate to different view (e.g. Tags or Endpoints) and then return, the previous vald value is set in the box.
This should be fixed.

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, enter e.g. "1" int he min password length
4. Close the error, navigate to e.g. TagService or UserService inside this account settings, discard changes
5. Return back to that field - observe the number - it stays at "1"
6. Change views to e.g. Enpoints and then return - observe the filed once again - it is set to previous valid value

Expected behavior
Value should not (even implicitly) be saved if it does not meet the minimum requirements.

Screenshots

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

Additional context
Add any other context about the problem here.

Yes, user is not able to directly type the characters in the min password field but they can be copy-pasted.
And in this case the error message is not OK (see screenshot bellow).

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, copy paste a string into password.min.lenght
4. Observe the error

Expected behavior
Error message should be somehow generic, to not mention the field's content.

Screenshots

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

If user changes value from the default one (12), this is no visible in the password description when creating new user from Accounts -> Users -> new user(see screenshot bellow), but is visible when changing account (top right corner).

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, enter e.g. "13" int he min password length
4. Try to add a new user (Account -> User -> add new user) - do not change accounts, stay on kapua-sys account
5. Observe the number that is not changed from 12 to 13.

Expected behavior
Value in password description when creating new user from parent account should be changed.

Screenshots

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

Additional context
Add any other context about the problem here.

if you set min password length to 256, the error message is"Value must be smaller than 255", but this is wrong, becasue min password length may actually be 255, so the message should be "Value must be smaller than 256".

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, change password.min.lenght to 256
4. Try to create a user with 255 password length - observe the error.

Expected behavior
Error message should be "Value must be smaller than 256", because min password lenght may actually be 255.

Screenshots

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

If you are trying to create a user in first subaccount of kapua-sys (e.g. account0) you get error message as shown in Screenshot no. 1.
But if you create a subaccount of accoun0 (e.g. account0_1) and do not meet the minimum requirements for password length, the error message is totally different (screenshot No. 2)

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. account0)
3. Select account0, go to Account settings, change password.min.lenght to e.g. 20
4. Try to create a user with password shorter than 20 - observe the error (screenshot no. 1)
5. Create a subaccount of account0, e.g. account0_1.
6. in account0_1 set the min password to e.g. 25, try to create a user within account0_1 with password shorter than 25
7. Observe the error message - it is different than the upper one.

Expected behavior
Error messages hould be the same.

Screenshot No. 1:

Screenshot No. 2:

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

Current description fo min passowrd length field is: "The minimum length of the password. Changing this won't affect existing passwords. This value cannot be less than the system default value. If empty, use the system default value."

but should be:

"The minimum length of the password. Changing this won't affect existing passwords. This value cannot be less than the system default value. If empty, system default value will be used."

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, observe the min password length field description

Expected behavior
Field description should be changed - see above.

Screenshots

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

Additional context
Add any other context about the problem here.

If user wants to create a user that does not meet the minimum password requirements, the user is created anyway, after the error disappears and the new user dialogue box is closed.

Testflow:

1. Login as kapua-sys
2. Go to Accounts, create an account (e.g. acco0)
3. Select acc0, go to Account settings, change password.min.lenght to 255
4. Change infinite child users to True
5. Try to create a user - observe the error
6. Close the dialogue box, observe the User list - user is created anywaty

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
/

Version of Kapua
https://github.com/lorthirk/kapua/tree/feature-configurablePasswordLength

Type of deployment
[ ] Local Vagrant deployment
[x] Docker
[ ] Openshift (in its variants)
[ ] Others

Main component affected
[x] Console (in case of console please report info on which browser you encountered the problem)
[ ] REST API -> did not try rest api!!! -> please check!
[ ] Message Broker
[ ] - Others

Additional context
Add any other context about the problem here.