Add adjustable password length and tabu list for recently used passwords

[seitenbau-govdata]

We made several improvements to this plugin that are based on each other. We have included all improvements in this PR, it's a bit messy, but if needed, we can talk and maybe find a good way to split them up.

What we have done:

• added tests
• added translations (and included a german translation)
• add config declaration
• bugfix for newer CKAN, session object changed and have no "invalidate" method anymore
• if used with https://github.com/keitaroinc/ckanext-saml2auth, we patch the other extension to use the password generation of this extension - so generated passwords comply with the requirements defined here

[ThrawnCA]

This has good potential but there are various problems, most notably the use of random to generate the password.

[seitenbau-govdata]

@ThrawnCA Thank you very much for your review!

[ThrawnCA]

six is a good library, but...is this plugin actually compatible with Python 2? If not, then there's no point.

[seitenbau-govdata]

git blame says you introduced it 2021 😄
We could lose the library but that would be out of scope for this PR, since we did not touch any of its occurrences, I think.

[ThrawnCA]

git blame says you introduced it 2021

Sure. In 2021, CKAN 2.8, and thus Python 2, were still current.

[seitenbau-govdata]

I just wondered where six came from, that's why I mentioned it. :) Please don't take that as criticism.
I just open an issue to track this so it can be done in another PR.

[ThrawnCA]

Looking better :)

TABULIST still appears in a bunch of places, which at first glance looks like something table-related. "Tabu" is a pretty esoteric word in English, plus it's more usually spelled "taboo", so I think "blacklist" is the simpler and clearer choice.

[seitenbau-govdata]

Looking better :)

TABULIST still appears in a bunch of places, which at first glance looks like something table-related. "Tabu" is a pretty esoteric word in English, plus it's more usually spelled "taboo", so I think "blacklist" is the simpler and clearer choice.

I looked at https://en.wikipedia.org/wiki/Tabu_search to see if it is well known in english, but then we switch to blacklist, which is more widely spread in applications. :)