From 7c07ac22adb2fc7fbbe4d99db218d21098a5a35d Mon Sep 17 00:00:00 2001
From: rubenwardy <rw@rubenwardy.com>
Date: Sat, 5 Dec 2020 00:29:57 +0000
Subject: [PATCH] Add password suggestions to change and set password forms

---
 app/blueprints/users/account.py              | 6 ++++--
 app/templates/users/change_set_password.html | 9 +++++++++
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/app/blueprints/users/account.py b/app/blueprints/users/account.py
index 9a27cf4..6c9e478 100644
--- a/app/blueprints/users/account.py
+++ b/app/blueprints/users/account.py
@@ -228,7 +228,8 @@ def change_password():
 		else:
 			flash("Old password is incorrect", "danger")
 
-	return render_template("users/change_set_password.html", form=form)
+	return render_template("users/change_set_password.html", form=form,
+			suggested_password=genphrase(entropy=52, wordset="bip39"))
 
 
 @bp.route("/user/set-password/", methods=["GET", "POST"])
@@ -246,7 +247,8 @@ def set_password():
 		if ret:
 			return ret
 
-	return render_template("users/change_set_password.html", form=form, optional=request.args.get("optional"))
+	return render_template("users/change_set_password.html", form=form, optional=request.args.get("optional"),
+			suggested_password=genphrase(entropy=52, wordset="bip39"))
 
 
 @bp.route("/user/verify/")
diff --git a/app/templates/users/change_set_password.html b/app/templates/users/change_set_password.html
index 89d22a6..42dc97d 100644
--- a/app/templates/users/change_set_password.html
+++ b/app/templates/users/change_set_password.html
@@ -38,6 +38,15 @@
 	{{ render_field(form.password, tabindex=230) }}
 	{{ render_field(form.password2, tabindex=240) }}
 
+	<p>
+		Must be at least 8 characters long.
+	</p>
+	<p>
+		Password suggestion
+		(<a href="https://xkcd.com/936/">Why?</a>):
+		<code>{{ suggested_password }}</code>
+	</p>
+
 	{{ render_submit_field(form.submit, tabindex=280) }}
 </form>