Merge branch 'passwordOptions' into 'main'

add password check

See merge request v3/service/auth!50

src/modules/authentication/authentication.constants.ts

@@ -0,0 +1,9 @@
+import { IsStrongPasswordOptions } from 'class-validator';
+
+export const STRONG_PASSWORD_OPTIONS: IsStrongPasswordOptions = {
+  minLength: 8,
+  minLowercase: 1,
+  minNumbers: 1,
+  minSymbols: 1,
+  minUppercase: 1,
+};

src/modules/authentication/interface/grpc-controllers/dtos/create-authentication.request.dto.ts

@@ -4,9 +4,11 @@ import {
   IsArray,
   IsNotEmpty,
   IsString,
+  IsStrongPassword,
   ValidateNested,
 } from 'class-validator';
 import { UsernameDto } from './username.dto';
+import { STRONG_PASSWORD_OPTIONS } from '@modules/authentication/authentication.constants';
 
 export class CreateAuthenticationRequestDto {
   @IsString()
@@ -19,7 +21,7 @@ export class CreateAuthenticationRequestDto {
   @ValidateNested({ each: true })
   usernames: UsernameDto[];
 
-  @IsString()
+  @IsStrongPassword(STRONG_PASSWORD_OPTIONS)
   @IsNotEmpty()
   password: string;
 }

src/modules/authentication/interface/grpc-controllers/dtos/update-password.request.dto.ts

@@ -1,11 +1,12 @@
-import { IsNotEmpty, IsString } from 'class-validator';
+import { STRONG_PASSWORD_OPTIONS } from '@modules/authentication/authentication.constants';
+import { IsNotEmpty, IsString, IsStrongPassword } from 'class-validator';
 
 export class UpdatePasswordRequestDto {
   @IsString()
   @IsNotEmpty()
   userId: string;
 
-  @IsString()
+  @IsStrongPassword(STRONG_PASSWORD_OPTIONS)
   @IsNotEmpty()
   password: string;
 }