apple / apple/password-manager-resources

Password Rules Validation Tool provides invalid examples when multiple digits are required

Open
#685 5 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
4.8k
Forks
649
Avg merge
9h 50m
Merged PRs (30d)
15

Description

I'm attempting to validate a rule at the [tool linked in the documentation](https://developer.apple.com/password-rules/) but it minimally doesn't seem to be working correctly for rules that require multiple digits. At first I wasn't sure if maybe this type of rule just wasn't supported, but I see existing quirks specify it so believe it to be an issue with the tool.

I've been supplying this rule:
```
required: lower, upper;
required: digit;
required: digit;
required: [-];
```

And got back these examples:
```
RJt-k1f-DGf-nIh <-- only has a single digit '1'
kSA-0Rb-asB-Cze <-- only has a single digit '0'
Ben-b6l-roL-37u <-- does have multiple digits
```

Contributor guide

Open the contributing guide

Research direction

Start with the password-rules validation tool linked from the documentation and reproduce the supplied rule requiring two digits. Compare its generated examples with the rule’s requirements, including the three examples in this report. Done means every returned example contains multiple digits while still satisfying the other stated requirements.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
security, tooling
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.