[USERGRID-1339] When creating a user account with a password that fails validation check, the account is created anyway

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.2.0
• Component/s: Stack
• Assignee: Unassigned
• Reporter: Brandon Shelley
• Created: 01/Mar/17 20:46
• Updated: 24/Mar/17 06:31

Description

Take the following params:

email=[e-mail]
name=Test
password=x

If I attempt to create a user account with a password that doesn't meet complexity requirements, the following error is returned:

 {
    "error": "error_password_policy_violation",
    "timestamp": 1488401172596,
    "duration": 0,
    "error_description": "error_length_policy: must be at least 4 characters "
  }

That's expected and good!

The problem is that the user account is created anyway, either without a password entirely, or worse, with the weak password.