BacLuc / ecamp3 / 28473779206

push

github

feat(security): OWASP 2.1.12 — add show/hide password toggle to all auth forms

https://github.com/OWASP/ASVS/blob/master/4.0/en/0x11-V2-Authentication.md#v21-password-security
Extract the password field together with its show/hide toggle logic into a
reusable EPasswordField component (wrapping e-text-field). The component owns
its own showPassword state and renders an eye/eye-off icon button in the
append-inner slot that reveals or masks the password. All other slots and
attrs (loader, progress, vee-rules, autocomplete, ...) are forwarded, so the
component is a drop-in replacement for e-text-field on password inputs.

Use e-password-field for every password field in Login, Register and
ResetPassword. Each field manages its toggle independently; the register
form deliberately no longer shares the toggle state between the two password
fields, which keeps the component self-contained.

The fields already used type="password" and correct autocomplete values
(current-password / new-password), satisfying 2.1.12 (paste and password
manager support) without further changes.

Add showPassword / hidePassword translations to all five frontend locales
(en, de, fr, it, rm).

Issue: https://github.com/ecamp/ecamp3/issues/2563

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

858 of 4773 branches covered (17.98%)

Branch coverage included in aggregate %.

8 of 10 new or added lines in 2 files covered. (80.0%)

4867 of 11196 relevant lines covered (43.47%)

982.87 hits per line