budibase/packages/backend-core/src/security/auth.ts

import { env } from ".."

export const PASSWORD_MIN_LENGTH = 8
export const PASSWORD_MAX_LENGTH = 512

export function validatePassword(
  password: string
): { valid: true } | { valid: false; error: string } {
  if (env.isDev() && !env.isTest() && password) {
    // We accept any password while on development
    return { valid: true }
  }

  if (!password || password.length < PASSWORD_MIN_LENGTH) {
    return {
      valid: false,
      error: "Password invalid. Minimum eight characters.",
    }
  }

  if (password.length > PASSWORD_MAX_LENGTH) {
    return {
      valid: false,
      error: `Password invalid. Maximum ${PASSWORD_MAX_LENGTH} characters.`,
    }
  }

  return { valid: true }
}