assert also old password complexity

apioo · Nov 2, 2024 · 362b586 · 362b586
1 parent 1d2ba28
commit 362b586
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/src/Service/User.php b/src/Service/User.php
@@ -283,6 +283,7 @@ public function changePassword(AccountChangePassword $changePassword, UserContex
         }
 
         // assert password complexity
+        $this->validator->assertPassword($oldPassword);
         $this->validator->assertPassword($newPassword);
 
         // change password

diff --git a/src/Service/User/Validator.php b/src/Service/User/Validator.php
@@ -136,7 +136,7 @@ public function assertPassword($password, $minLength = null, $minAlpha = null, $
         $minNumeric = $minNumeric ?? 0;
         $minSpecial = $minSpecial ?? 0;
 
-        // it is not possible to user passwords which have less then 8 chars
+        // it is not possible to use passwords which have less than 8 chars
         if ($minLength < 8) {
             $minLength = 8;
         }