What's the problem?
The signup form only has required on the password field no minimum length, no complexity rules. A user can sign up with a single character as their password.
For a medical diagnostic portal handling patient data, this is a real concern. Basic password strength is an expected minimum.
Where is it happening
src/app/auth/signup/page.tsx — password field
What I'm suggesting
Add client-side validation to enforce:
- Minimum 8 characters
- At least one number
- Show a clear inline error message when the rule is violated
Why it matters
This is a clinical tool used by doctors with access to patient diagnostic records. Weak passwords on such a portal are a genuine security concern.
I would like to work on this issue under GSSoC.
Thank you.
What's the problem?
The signup form only has
requiredon the password field no minimum length, no complexity rules. A user can sign up with a single character as their password.For a medical diagnostic portal handling patient data, this is a real concern. Basic password strength is an expected minimum.
Where is it happening
src/app/auth/signup/page.tsx— password fieldWhat I'm suggesting
Add client-side validation to enforce:
Why it matters
This is a clinical tool used by doctors with access to patient diagnostic records. Weak passwords on such a portal are a genuine security concern.
I would like to work on this issue under GSSoC.
Thank you.