)]}'
{"keystone/common/utils.py":[{"author":{"_account_id":6172,"name":"Boris Pavlovic","email":"boris@pavlovic.me","username":"boris-42"},"change_message_id":"3c2b3f8b13e07c84a6c5ab3619f024fa037546b6","unresolved":false,"context_lines":[{"line_number":104,"context_line":"            else:"},{"line_number":105,"context_line":"                msg \u003d \"Truncating user password to %d characters.\""},{"line_number":106,"context_line":"                LOG.warning(msg, max_length)"},{"line_number":107,"context_line":"                return password[:max_length]"},{"line_number":108,"context_line":"        else:"},{"line_number":109,"context_line":"            return password"},{"line_number":110,"context_line":"    except TypeError:"}],"source_content_type":"text/x-python","patch_set":1,"id":"7f231b9d_65a9db79","line":107,"updated":"2017-06-12 18:35:00.000000000","message":"I think we shouldn\u0027t allow users (in API) to specify longer password than we can store. This doesn\u0027t look secure IMHO.","commit_id":"8f71dee82b6320643024e1cafc63c37ede121ed0"},{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"9f9affd98c6373f396f8853070e454542c11926f","unresolved":false,"context_lines":[{"line_number":104,"context_line":"            else:"},{"line_number":105,"context_line":"                msg \u003d \"Truncating user password to %d characters.\""},{"line_number":106,"context_line":"                LOG.warning(msg, max_length)"},{"line_number":107,"context_line":"                return password[:max_length]"},{"line_number":108,"context_line":"        else:"},{"line_number":109,"context_line":"            return password"},{"line_number":110,"context_line":"    except TypeError:"}],"source_content_type":"text/x-python","patch_set":1,"id":"7f231b9d_e8d02253","line":107,"in_reply_to":"7f231b9d_65a9db79","updated":"2017-06-12 18:36:26.000000000","message":"We already can. This is an option, see above (strict_password_check). Default is we do not enforce the length. Folks wanted this way back in the day.","commit_id":"8f71dee82b6320643024e1cafc63c37ede121ed0"}]}