@heiglandreas That's a fair point, and the default max being discussed is 72 (due to bcrypt internals), so it would not violate the NIST recommendation.
@sarah Every programming decision has trade-offs. I find Laravel to be overwhelmingly positive, despite not being perfect. And in this case, I was doing something dumb, so I'll cut the framework some slack.
@tvbeek got it, that makes sense. So it’s a smoke test that the command runs, you’re not trying to run your tests with the cached environment (though I do recommend running tests with routes cached, I’ll share a bug story tomorrow as to why)