Skip to content

fix: align ForgotPassword password validation with Login password policy#259

Open
pericharlabindhumadhavi-data wants to merge 1 commit into
rdodiya:gssoc_developfrom
pericharlabindhumadhavi-data:fix/password-validation-mismatch-239
Open

fix: align ForgotPassword password validation with Login password policy#259
pericharlabindhumadhavi-data wants to merge 1 commit into
rdodiya:gssoc_developfrom
pericharlabindhumadhavi-data:fix/password-validation-mismatch-239

Conversation

@pericharlabindhumadhavi-data

Copy link
Copy Markdown

Closes #239

What was the problem?

The Login page enforced a strong password policy requiring:

  • Minimum 8 characters
  • Uppercase letter
  • Lowercase letter
  • Number
  • Special character

However, ForgotPassword.jsx only validated passwords with a minimum length of 6 characters. This allowed users to reset their password to a weak value that would later be rejected by the Login form.

How was it solved?

  • Updated the resetPasswordSchema in ForgotPassword.jsx.
  • Matched the validation rules used in Login.jsx.
  • Ensured password requirements remain consistent across authentication workflows.

Impact

  • Prevents users from creating passwords that cannot be used during login.
  • Improves authentication consistency.
  • Reduces confusion during password reset.

Checklist

  • Updated reset password validation schema.
  • Matched Login page password rules.
  • Tested password reset workflow.
  • Followed CONTRIBUTING.md guidelines.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bug: Password validation mismatch between Login and ForgotPassword allows weak password reset

1 participant