Skip to content

7.34.0

Compare
Choose a tag to compare
@spryker-release-bot spryker-release-bot released this 03 Dec 13:19
· 117 commits to master since this release

Included commits: 7.33.1...7.34.0

Improvements

  • Added CustomerConfig::getCustomerPasswordCharacterSet() for storing configuration of pattern of a required character set.
  • Added CustomerConfig::getCustomerPasswordAllowList() for storing configured list of passwords that bypass any validation.
  • Added CustomerConfig::getCustomerPasswordDenyList() for storing configured list of passwords that not allowed to be used.
  • Added CustomerConfig::getCustomerPasswordSequenceLimit() for storing repeated character sequence length limit configuration.
  • Added CustomerConfig::isRestorePasswordValidationEnabled() enabling password check on password restoring action.
  • Added CustomerErrorTransfer::$parameters for passing parameters to error messages.

Adjustments

  • Adjusted CustomerFacade::addCustomer(), CustomerFacade::registerCustomer(), CustomerFacade::updateCustomer(), CustomerFacade::updateCustomerPassword(), CustomerFacade::saveCustomerForOrder(), CustomerFacade::saveOrderCustomer() and CustomerFacade::anonymizeCustomer() methods to apply configurable password policy validation on provided passwords.
  • Adjusted CustomerFacade::restorePassword() to apply configurable password policy validation when it is explicitly enabled by configuration.
  • Adjusted Customer to accept CustomerPasswordPolicyValidatorInterface as a dependency.
  • Moved password length check and related constants from Customer to LengthCustomerPasswordPolicy.