Support dynamic password lengths for Rails > 5.2

[manojmj92]

Hello,

Rails now supports length validator to have dynamic min and max values.

I feel this would be a nice addition to have Devise support this feature. I have made the change such that no current installations of Devise will have trouble with this change. Everything should work as perfectly as before.

This change is useful for instances where applications have the need to support dynamic password lengths, without a system restart. Such applications will just have to override the password_length method in their own classes to support dynamic password lengths.

Real world use case: We have been trying to implement dynamic password length at GitLab. Implementation issue: https://gitlab.com/gitlab-org/gitlab/issues/36776
Right now, we have implemented the same using a monkey patch for the password length validator

[sourcelevel-bot]

Hello, @manojmj92! This is your first Pull Request that will be reviewed by SourceLevel, an automatic Code Review service. It will leave comments on this diff with potential issues and style violations found in the code as you push new commits. You can also see all the issues found on this Pull Request on its review page. Please check our documentation for more information.

[sourcelevel-bot]

SourceLevel has finished reviewing this Pull Request and has found:

• 2 possible new issues (including those that may have been commented here).

See more details about this review.

[manojmj92]

Hello @tegon, could you kindly review? 🙂

[manojmj92]

@carlosantoniodasilva could you please review? 🙂

[carlosantoniodasilva]

@manojmj92 sorry about the delay here, things have been a bit crazy but this is on my radar to get back to you. Thanks for the work.

[manojmj92]

Hello @carlosantoniodasilva, could you please review? 🙂

[carlosantoniodasilva]

@manojmj92 yes, my apologies, this one slipped through the cracks, appreciate the ping. I've recently started to catch up on some of the issues/PRs here and this one is high on my radar, I'll get to it soon, just have a few other things to wrap up first.

[ghiculescu]

Such applications will just have to override the password_length method in their own classes to support dynamic password lengths.

It would be helpful to see an example, maybe in the CHANGELOG. I found https://gitlab.com/gitlab-org/gitlab/-/blob/master/app/models/user.rb#L488 which gave me a better idea of what's being proposed.

[nashby]

@manojmj92 thanks for PR! I updated it (since we dropped Rails 5.2 support) here #5734 and merged.