Skip to content

fix: respect isStrongPasswordDisabled in password validator#488

Merged
lakhansamani merged 3 commits intomainfrom
fix/password-validator-strong-password
Mar 1, 2026
Merged

fix: respect isStrongPasswordDisabled in password validator#488
lakhansamani merged 3 commits intomainfrom
fix/password-validator-strong-password

Conversation

@lakhansamani
Copy link
Contributor

Summary

  • Added early return in IsValidPassword when isStrongPasswordDisabled is true
  • When disabled, only min/max length (6-36 chars) is enforced, skipping character class checks

Test plan

  • Verify passwords without special chars are accepted when strong password is disabled
  • Verify strong password rules still apply when enabled

Fixes #477

The IsValidPassword function ignored the isStrongPasswordDisabled parameter
and always enforced strong password rules. Now when strong password is
disabled, only min/max length is checked.

Fixes #477
@lakhansamani lakhansamani merged commit 8750af8 into main Mar 1, 2026
@lakhansamani lakhansamani deleted the fix/password-validator-strong-password branch March 1, 2026 06:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Password validator ignores isStrongPasswordDisabled parameter

1 participant