Commit Graph
5 Commits
Author SHA1 Message Date
ksv741 ec95d2756d fix: align password policy to 8-72 printable ASCII on register (WealthLedger/backend#60)
Backend verify / commits (pull_request) Successful in 32s
Backend verify / security (pull_request) Successful in 13s
Backend verify / verify (pull_request) Successful in 4m59s
Register accepts only printable ASCII (letters, digits, symbols, space),
8-72 characters, so characters equal bytes and the bcrypt 72-byte limit
holds without silent truncation. Login only caps the password at 72 bytes
so accounts created under the previous policy can still sign in.

CredentialsDto is split into RegisterDto and LoginDto; OpenAPI publishes
the register pattern and length bounds.
2026-10-16 09:41:58 +03:00
ksv741 b78c215ff1 refactor: replace ignored numeric literals with constants 2026-09-28 16:37:01 +03:00
ksv741 a970eaaf7a chore: strengthen backend eslint profile 2026-09-28 16:37:01 +03:00
ksv741 8637ad2f34 refactor: centralize domain values and enforce numeric lint 2026-09-13 14:37:39 +03:00
ksv741 8ba005346d refactor: organize backend by business responsibility 2026-09-13 13:52:57 +03:00