Bug: password field on login is shorter than possible passwords

[ciphel]

Describe the Bug

We made a local installation of GibbonEdu.
At first login I changed the temporary password to a long one (32 characters).
When I try to login the long password will be truncated and so I'm not able to login.

To Reproduce

1. create a user with a temporary password
2. login as this user
3. change the temporary password to a long one (no error message appears)
4. logout from this account
5. try to login with the new passwort (I worked with keepassxc - it tells me that the password field at login is too short)

Expected behavior

Either I want an message on changing the temporary password on first login or I want to be able to login with a long password.

Actual behavior

I was able to change the temporary password to a long one and not able to login with this password again.

Screenshots

No response

Gibbon version

v29.0.00

Browser

Firefox

Browser Version

142.0.1 (64-Bit)

[SKuipers]

Hi @ciphel, thanks for your bug report. I've had a look at the code and tested the password reset page and I haven't been able to reproduce this issue yet. I can see that the current password field limit is 30 (which is a limit that could certainly be increased in future). However, in each of the password reset, preferences, and login pages, this 30 character limit is being enforced. Are you able to share more about the step "create a user with a temporary password", which method did you use to create this user and set the password?

[yookoala]

@ciphel: It could be operating system specific or setting specific.

1. What operating system are you using?
2. What is the screensize / window size when you see the problem?

[ciphel]

Apologies for the long wait. But now I was able to look into the matter again. It is an issue in combination - at least - with my password manager (keepassxc and the keepassxc-Browser-extension in firefox).

1. I create an account with a password up to 30 characters (all above will be truncated as far as I can see) and the option to change the password at first login
2. This login is successful
3. The change password page for the new login appears. I type in the actual password and I create a new password > 30 characters. No warning about the truncation at 30 characters appears. It seems that the long password has been saved.
4. I save the new password for the new account also in keepassxc
5. I try to login again with the automation from the browser-plugin. The browser-plugin gives me a warning that the the password is longer than the field allows.
6. The login fails.
   It works if I don't let the password fill in automatically, but copy it manually from the password database instead. Then it will probably be automatically shortened to 30 characters.

Perhaps it would be possible to indicate the reduction to 30 characters when the new password is entered for the first time.
Maybe we can change this issue from "bug" to "request"?