Skip to content

Add password complexity validation#665

Open
czhu12 wants to merge 1 commit into
mainfrom
feat/password-complexity-validator
Open

Add password complexity validation#665
czhu12 wants to merge 1 commit into
mainfrom
feat/password-complexity-validator

Conversation

@czhu12

@czhu12 czhu12 commented Jul 11, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Adds server-side PasswordComplexityValidator requiring uppercase, lowercase, digit, and special character
  • Adds password-complexity Stimulus controller with live checklist UI (check/circle icons per rule)
  • Bumps minimum password length from 6 to 8 in Devise config
  • Wired up across all password input views (sign up, edit profile, password reset, forced change, onboarding)

Test plan

  • Sign up with a weak password (e.g. "password") and verify server-side errors
  • Sign up and verify the live checklist updates as you type
  • Verify checklist appears on password reset, profile edit, and onboarding forms
  • Verify existing users with short passwords can still log in but must meet complexity on password change

Adds server-side validator requiring uppercase, lowercase, digit, and
special character. Adds Stimulus controller showing a live checklist
as the user types. Bumps minimum password length from 6 to 8.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant