[PR #5923] Fix and improvements to password policies #2508

New Issue

OVERLORD · 2025-10-09T18:06:24+03:00

OVERLORD commented

2025-10-09 18:06:24 +03:00

Original Pull Request: https://github.com/dani-garcia/vaultwarden/pull/5923

State: closed
Merged: Yes

Return the expected MasterPasswordPolicy when calling the user-verification endpoint.
This allows to enforce the policy when unlocking the screen.

And wrapped the min_complexity and min_length in option otherwise when set to null the whole policy was ignored.

**Original Pull Request:** https://github.com/dani-garcia/vaultwarden/pull/5923 **State:** closed **Merged:** Yes --- Return the expected [MasterPasswordPolicy](https://github.com/bitwarden/clients/blob/main/libs/common/src/auth/models/response/master-password-policy.response.ts) when calling the [user-verification](https://github.com/bitwarden/clients/blob/main/libs/common/src/auth/services/user-verification/user-verification-api.service.ts#L18C14-L18) endpoint. This allows to enforce the policy when unlocking the screen. And wrapped the `min_complexity` and `min_length` in `option` otherwise when set to `null` the whole policy was ignored.

OVERLORD added the pull-request label 2025-10-09 18:06:24 +03:00

OVERLORD closed this issue

2025-10-09 18:06:25 +03:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/vaultwarden#2508