Skip to content

Fix personal-info passwords and add reveal controls#35

Merged
sidhujag merged 1 commit intomasterfrom
fix/password-personal-info
Apr 26, 2026
Merged

Fix personal-info passwords and add reveal controls#35
sidhujag merged 1 commit intomasterfrom
fix/password-personal-info

Conversation

@sidhujag
Copy link
Copy Markdown
Member

Summary

  • Cap password strength when the new password includes the user's account identifier/email local part, preventing personal-info variants from becoming "very strong" by adding extra characters.
  • Add a reusable inline password reveal button and apply it to login, registration, password rotation, TOTP step-up, vault unlock/import, delete-account, and governance unlock forms.
  • Add focused coverage for personal-info password rejection and the reveal toggle behavior.

Test plan

  • npm test -- --runTestsByPath src/components/PasswordInput.test.js src/lib/passwordPolicy.test.js src/pages/Register.test.js src/pages/Login.test.js src/components/ChangePasswordCard.test.js src/components/TwoFactorCard.test.js src/lib/authService.test.js --watchAll=false

Made with Cursor

Add an inline password reveal control across secret-entry forms and cap password strength when account identifiers are used, so personal-info variants cannot pass by adding extra entropy-looking characters.

Made-with: Cursor
@sidhujag
Copy link
Copy Markdown
Member Author

@codex review

@chatgpt-codex-connector
Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Already looking forward to the next diff.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@sidhujag sidhujag merged commit b48e5d9 into master Apr 26, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant