Skip to content

Random password is generated without special characters #17785

@rsjr

Description

@rsjr

Description:

The random password generated in the "Admin -> Users" panel is created only with letters/numbers (a-Z / 0-9). No special characters are added.

This is a problem when setting "At Least One Symbol" is active (Admin -> Accounts -> Password Policy), as the user will receive via email a password which is actually not valid.

Steps to reproduce:

  1. Admin User -> enable password policy and At Least One Symbol settings
  2. Admin User -> go to user panel and generate a random password for the end user
  3. End user -> tries to login with the random password received via email. Password gets rejected as it does not have the special chars.

Expected behavior:

Password to be generated following the password policy set on "Accounts"

Actual behavior:

password-random-1

Server Setup Information:

  • Version of Rocket.Chat Server: reproduced on both 3.2.2 and 3.3.0-develop

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions