password max and min length

app/crypto.go

@@ -22,7 +22,10 @@ const (
 
 // Password complexity constants
 const (
-	minPasswordLen = 8
+	// minPasswordLen represents the min password length in characters
+	minPasswordLen = 10
+	// maxPasswordLen = 128 represents the max password length in characters
+	maxPasswordLen = 128
 )
 
 // Encrypt encrypts cipherText with a given password
@@ -97,7 +100,7 @@ func Decrypt(cipherText []byte, password string) ([]byte, error) {
 
 // VerifyPasswordComplexity verifies password complexity
 func VerifyPasswordComplexity(password string) bool {
-	return len(password) >= minPasswordLen
+	return (len(password) >= minPasswordLen) && (len(password) <= maxPasswordLen)
 }
 
 // InvalidPassword is returned from Decrypt if an invalid password is used to

app/crypto_test.go

@@ -29,13 +29,30 @@ func TestInvalidPassword(t *testing.T) {
 }
 
 func TestPasswordComplexity(t *testing.T) {
-	test := "1234567"
+	test := "12345679"
 	if app.VerifyPasswordComplexity(test) {
 		t.Fail()
 	}
 
-	test = "12345678"
+	test = "12345678910"
 	if !app.VerifyPasswordComplexity(test) {
 		t.Fail()
 	}
+
+	test = ""
+	for i := 0; i < 128; i++ {
+		test += "1"
+	}
+	if !app.VerifyPasswordComplexity(test) {
+		t.Fail()
+	}
+
+	// Test 128 character length
+	test = ""
+	for i := 0; i < 129; i++ {
+		test += "1"
+	}
+	if app.VerifyPasswordComplexity(test) {
+		t.Fail()
+	}
 }