Add configurable password validation rules to user profiles#8289
Draft
Add configurable password validation rules to user profiles#8289
Conversation
Co-authored-by: lizheng-steedos <151509384+lizheng-steedos@users.noreply.github.com>
…licies Co-authored-by: lizheng-steedos <151509384+lizheng-steedos@users.noreply.github.com>
… quality Co-authored-by: lizheng-steedos <151509384+lizheng-steedos@users.noreply.github.com>
Co-authored-by: lizheng-steedos <151509384+lizheng-steedos@users.noreply.github.com>
Copilot
AI
changed the title
[WIP] Add configurable password policy rules for platform users
Add configurable password validation rules to user profiles
Jan 13, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Implements configurable password policies per user profile (简档), allowing administrators to enforce password complexity requirements like minimum length, character types (uppercase, lowercase, numbers, special characters), and maximum length.
Changes
Schema & Database
permission_setobject:password_min_length,password_max_length,password_require_uppercase,password_require_lowercase,password_require_number,password_require_special_characterprofileschema with corresponding field definitionsServer-Side Validation
UserProfilePolicyinterface for type safetyvalidatePasswordPolicy()method enforcing profile-specific rules inchangePassword()andresetPassword()flowsgetUserProfile()to fetch password policies from user's profile with NaN protection on numeric conversionsSPECIAL_CHAR_PATTERNandDEFAULT_PASSWORD_POLICYconstants to shared typesClient-Side & API
validatePassword()function to support structured policy fields while maintaining backward compatibility with regex-based policies/api/accounts/settingsendpoint to merge user-specific password policies when authenticatedExample Configuration
Profile with strict password requirements:
Validation errors returned to users:
Default values (min: 8, max: 128, all requirements: false) ensure existing profiles work without changes.
Original prompt
💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.