Merge pull request #34534 from nextcloud/backport/34500/stable22

[stable22] Fix password length limitation

Author: nickvergessen

apps/provisioning_api/lib/Controller/UsersController.php

@@ -382,6 +382,9 @@ public function addUser(string $userid,
 		}
 
 		$generatePasswordResetToken = false;
+		if (strlen($password) > 469) {
+			throw new OCSException('Invalid password value', 101);
+		}
 		if ($password === '') {
 			if ($email === '') {
 				throw new OCSException('To send a password link to the user an email address is required.', 108);
@@ -827,6 +830,9 @@ public function editUser(string $userId, string $key, string $value): DataRespon
 				break;
 			case self::USER_FIELD_PASSWORD:
 				try {
+					if (strlen($value) > 469) {
+						throw new OCSException('Invalid password value', 102);
+					}
 					if (!$targetUser->canChangePassword()) {
 						throw new OCSException('Setting the password is not supported by the users backend', 103);
 					}

apps/settings/js/vue-settings-apps-users-management.js

@@ -56,6 +56,7 @@
 					ref="newuserpassword"
 					v-model="newUser.password"
 					:minlength="minPasswordLength"
+					:maxlength="469"
 					:placeholder="t('settings', 'Password')"
 					:required="newUser.mailAddress===''"
 					autocapitalize="none"