fix(password-confirmation): exempt unsupported backends from strict and non-strict confirmation checks#60815

Draft

joshtrichards wants to merge 11 commits into

jtr/fix-PWC-Middleware

Commits on May 28, 2026

fix(AppFramework): make basic auth parsing less brittle in PasswordConfirmationMiddleware
joshtrichards
authored
refactor(AppFramework): PasswordConfirmationMiddleware exemptions/exclusions helpers
joshtrichards
authored
refactor(AppFramework): extract p/w confirmation Authorization header parsing logic for clarity
joshtrichards
authored
refactor(AppFramework): replace magic numbers in PasswordConfirmationMiddleware
joshtrichards
authored
fix(AppFramework): apply legacy PasswordConfirmation exemptions in both strict and non-strict modes
joshtrichards
authored
docs(AppFramework): note why auth username is ignored in PasswordConfirmationMiddleware
joshtrichards
authored