supabase / gotrue / 7022625768

65%

Build Type

push

github

Committed by web-flow

Commit Message

feat: add required characters password strength check (#1323)

Adds the `GOTRUE_PASSWORD_REQUIRED_CHARACTERS` config option, which if
set, will reject passwords that do not contain at least one character of
each set of characters.

It is defined like so: `abc...xyz:0123...89`. This means that at least
one lowercase and one digit has to be present in the password to be
accepted. All other characters are also allowed. To include the `:`
character, escape it with `\:`.

When a weak password is detected, the HTTP 429 error is sent with an
additional JSON field `weak_password` that includes a `reasons` property
-- an array of the strings:

- `length` if the password is not long enough
- `characters` if the password does not use all required character sets

---------

Co-authored-by: Kang Ming <kang.ming1996@gmail.com>

Run Details

50 of 55 new or added lines in 3 files covered. (90.91%)

2 existing lines in 1 file now uncovered.

7683 of 11716 relevant lines covered (65.58%)

53.61 hits per line