{"action":"created","issue":{"url":"https://api.github.com/repos/nextcloud/server/issues/3873","repository_url":"https://api.github.com/repos/nextcloud/server","labels_url":"https://api.github.com/repos/nextcloud/server/issues/3873/labels{/name}","comments_url":"https://api.github.com/repos/nextcloud/server/issues/3873/comments","events_url":"https://api.github.com/repos/nextcloud/server/issues/3873/events","html_url":"https://github.com/nextcloud/server/issues/3873","id":214823578,"number":3873,"title":"Option for more secure app passwords","user":{"login":"rugk","id":11966684,"avatar_url":"https://avatars0.githubusercontent.com/u/11966684?v=3","gravatar_id":"","url":"https://api.github.com/users/rugk","html_url":"https://github.com/rugk","followers_url":"https://api.github.com/users/rugk/followers","following_url":"https://api.github.com/users/rugk/following{/other_user}","gists_url":"https://api.github.com/users/rugk/gists{/gist_id}","starred_url":"https://api.github.com/users/rugk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rugk/subscriptions","organizations_url":"https://api.github.com/users/rugk/orgs","repos_url":"https://api.github.com/users/rugk/repos","events_url":"https://api.github.com/users/rugk/events{/privacy}","received_events_url":"https://api.github.com/users/rugk/received_events","type":"User","site_admin":false},"labels":[{"id":386379233,"url":"https://api.github.com/repos/nextcloud/server/labels/enhancement","name":"enhancement","color":"0e8a16","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2017-03-16T20:08:08Z","updated_at":"2017-03-20T11:23:05Z","closed_at":null,"body":"The current app passwords (or \"device/app pins\") are quite short and only consist of capital letters (the hyphens can be added by any attacker as they are at specific positions), which violates all password best practises and policies (even the one you can set in NextCloud's password policy app). The login password is likely longer and if generated with a password manager also more secure (with a higher entropy).\r\n\r\nSo could you at least offer an option for more secure passwords (just the way password generators generate them, with all kinds of ASCII characters in it)? Either for the user or at least for the server admin?"},"comment":{"url":"https://api.github.com/repos/nextcloud/server/issues/comments/287733268","html_url":"https://github.com/nextcloud/server/issues/3873#issuecomment-287733268","issue_url":"https://api.github.com/repos/nextcloud/server/issues/3873","id":287733268,"user":{"login":"nickvergessen","id":213943,"avatar_url":"https://avatars0.githubusercontent.com/u/213943?v=3","gravatar_id":"","url":"https://api.github.com/users/nickvergessen","html_url":"https://github.com/nickvergessen","followers_url":"https://api.github.com/users/nickvergessen/followers","following_url":"https://api.github.com/users/nickvergessen/following{/other_user}","gists_url":"https://api.github.com/users/nickvergessen/gists{/gist_id}","starred_url":"https://api.github.com/users/nickvergessen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nickvergessen/subscriptions","organizations_url":"https://api.github.com/users/nickvergessen/orgs","repos_url":"https://api.github.com/users/nickvergessen/repos","events_url":"https://api.github.com/users/nickvergessen/events{/privacy}","received_events_url":"https://api.github.com/users/nickvergessen/received_events","type":"User","site_admin":false},"created_at":"2017-03-20T11:23:05Z","updated_at":"2017-03-20T11:23:05Z","body":"I'd like to avoid this until we have a decent oauth endpoint, so the user doesn't have to type this anymore."}}
{"actor":{"display_login":"nickvergessen"}}