fix: respect isStrongPasswordDisabled in password validator by lakhansamani · Pull Request #488

fix: respect isStrongPasswordDisabled in password validator by lakhansamani · Pull Request #488 · authorizerdev/authorizer

Merged

lakhansamani merged 3 commits intomainfrom

fix/password-validator-strong-password

Mar 1, 2026

Merged

fix: respect isStrongPasswordDisabled in password validator#488
lakhansamani merged 3 commits intomainfrom
fix/password-validator-strong-password

Conversation

Copy link Copy Markdown

Contributor

lakhansamani commented
Mar 1, 2026

Summary

Added early return in IsValidPassword when isStrongPasswordDisabled is true
When disabled, only min/max length (6-36 chars) is enforced, skipping character class checks

Test plan

Verify passwords without special chars are accepted when strong password is disabled
Verify strong password rules still apply when enabled

Fixes #477

lakhansamani added 3 commits

March 1, 2026 11:45

fix: respect isStrongPasswordDisabled in password validator

04dcb71

The IsValidPassword function ignored the isStrongPasswordDisabled parameter
and always enforced strong password rules. Now when strong password is
disabled, only min/max length is checked.

Fixes #477

Merge branch 'main' into fix/password-validator-strong-password

4702904

test: add unit tests for password validator strong password flag

646123d

lakhansamani merged commit 8750af8 into main