Skip to content

feat(auth): show the project password policy as a live sign-up checklist - #2556

Draft
demolaf wants to merge 1 commit into
auth/password-policy-fetchfrom
auth/password-policy-checklist
Draft

demolaf wants to merge 1 commit into
auth/password-policy-fetchfrom
auth/password-policy-checklist

Conversation

@demolaf

@demolaf demolaf commented Nov 5, 2026 •

Copy link
Copy Markdown
Member

Shows the project password policy as a live checklist under the sign-up password field, behind an internal switch that stays off until the public opt-in flag lands.

Changes

  • One line per requirement the policy turns on, ticked as the user types; the symbol line lists the allowed symbols. Reuses the existing translated password strings, so no new strings. The maximum length is left out: its only string reads as an error even when met, and the backend always sends one.
  • Hints only: the checklist never disables sign-up, even under ENFORCE, and local passwordValidationRules keep blocking as before.
  • The live password check now applies minimumPasswordLength like the submit path does, so the button stays disabled below the minimum instead of failing on submit.
  • When the field's error repeats an unmet checklist line, the field drops the duplicate text but keeps its error state.

Maintainer note: Part of internal CPRN-449

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces a live password requirements checklist to the sign-up screen based on the project's password policy. It adds a new PasswordRequirementsChecklist composable to display met and unmet requirements dynamically as the user types, and integrates it with local validation rules to avoid redundant error messages. Additionally, comprehensive unit tests are added in SignUpUIPasswordPolicyTest and SignUpUITest to verify the checklist's behavior, error handling, and configuration swaps. There are no review comments, so we have no feedback to provide.

@demolaf
demolaf force-pushed the auth/password-policy-checklist branch from 47b6de7 to f7a4550 Compare November 5, 2026 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant