davidfowl / TodoApi

Todo application with ASP.NET Core Blazor WASM, Minimal APIs and Authentication
MIT License
2.74k stars 411 forks source link

Client-side password validation is inaccurate #39

Closed NielsPilgaard closed 1 year ago

NielsPilgaard commented 1 year ago

At the moment, client-side validation checks whether the password given when creating a user is between 6 and 32 characters, and fails if it is not.

However the password is required to contain at least:

So client-side validation can pass without the password being valid.

I'm submitting a PR shortly to fix this.

davidfowl commented 1 year ago

I don't want to rewrite this if the rules change 😄

NielsPilgaard commented 1 year ago

I'll make sure to maintain it 😁

davidfowl commented 1 year ago

MyManMyManHdGIF

davidfowl commented 1 year ago

Fixed