supabase / auth / 41701485687

72%

push

github

feat: min password length uses runes, not bytes (#2879)

## What
`checkPasswordStrength` compared `len(password)` (bytes) against
`Password.MinLength`. It now uses `utf8.RuneCountInString`, matching the
\"at least N characters\" message. Same bug class as the passkey
`friendly_name` fix (ce9a8eee).

## Why
A 3-character CJK password is 9 bytes and passed a minimum of 6.

## Tests
Added cases in `TestPasswordStrengthChecks` for a 3-rune/9-byte password
(rejected) and a 6-rune password (accepted).

---------

Co-authored-by: Cemal Kılıç <cemalkilic@users.noreply.github.com>

1 of 1 new or added line in 1 file covered. (100.0%)

16732 of 23338 relevant lines covered (71.69%)

498.72 hits per line