Unclear error message on registration and password reset for invalid password format

[Abdallah-Awwad]

Describe the Bug

Description:

New invited users attempting to register for Data Studio encounter a generic "Unexpected Error" message when their password doesn't meet the "Auth Password Policy" requirements (e.g., minimum length of 8 characters). This is misleading as it suggests an internal server error rather than an issue with the password itself.

Expected Behavior:

Upon entering an invalid formatted password, the user should receive a clear and specific error message detailing the password policy requirements. This could include:

• Minimum password length.
• Requirement for uppercase, lowercase characters, numbers and special characters.

Impact:

The unclear error message creates a confusing experience for new users.
Users might mistakenly believe there's a server issue instead of an issue with their password format.
This can lead to frustration and difficulty completing the registration or password reset process.

Additional Notes:

The same generic error message appears during password reset attempts when the new password doesn't meet the policy.

To Reproduce

1. Attempt to register for a new account or reset an existing password for Data Studio.
2. Access the registration or password reset link from your email.
3. During registration/reset, enter a password that violates at least one requirement of the "Auth Password Policy" (e.g., a password less than 8 characters long or lacking special characters).
4. Observe the error message displayed after attempting to submit the invalid password.

Directus Version

10.10.4

Hosting Strategy

Self-Hosted (Docker Image)

[br41nslug]

Leaving reference to this old discussion #12788

[patriciotourne-eo]

I can't seem to find the upvote in this issue (and the old one is locked) but I consider this a basic quality of life feature. These low code db manager systems are usually used by none technical people and this problem can be an adoption obstacle. I encounter this problem when adopting the tool at our organization. A basic "password policy error message" would be sufficient. It could have a stock message for each of the three template options and you could customize it if you create a custom one. I've read the discussion on showing checkboxes if the password complies with each rule, but this may only delay a basic still sufficient fix. I can help coding a solution.

[br41nslug]

This is an issue not a discussion / feature request, no need to upvote issues.