Password length not validated when creating iso

[ericholguin]

I'm submitting a ...

• bug report
• new feature / enhancement request
• improvement request (usability, performance, tech debt, etc.)
• other

Traffic Control components affected ...

• CDN in a Box
• Documentation
• Grove
• Traffic Control Client
• Traffic Monitor
• Traffic Ops
• Traffic Ops ORT
• Traffic Portal
• Traffic Router
• Traffic Stats
• Traffic Vault
• unknown

Current behavior:

When making a POST request to /isos with the rootPass key set to a string with one character i.e. "rootPass": "1" this will successfully create the ISO file and return:
HTTP/1.1 200 OK

Expected / new behavior:

The password should be validated that it is 8 characters in length just like in Traffic Portal. API should return:

HTTP/1.1 400 Bad Request
{
    "alerts": [
        {
            "text": "invalid rootPass length,
            "level": "error"
        }
    ]
}

Minimal reproduction of the problem with instructions:

Anything else:

[mhoppa]

FWIW same behavior lived in Perl implementation