7.34.0
spryker-release-bot
released this
03 Dec 13:19
·
117 commits
to master
since this release
Included commits: 7.33.1...7.34.0
Improvements
- Added
CustomerConfig::getCustomerPasswordCharacterSet()
for storing configuration of pattern of a required character set. - Added
CustomerConfig::getCustomerPasswordAllowList()
for storing configured list of passwords that bypass any validation. - Added
CustomerConfig::getCustomerPasswordDenyList()
for storing configured list of passwords that not allowed to be used. - Added
CustomerConfig::getCustomerPasswordSequenceLimit()
for storing repeated character sequence length limit configuration. - Added
CustomerConfig::isRestorePasswordValidationEnabled()
enabling password check on password restoring action. - Added
CustomerErrorTransfer::$parameters
for passing parameters to error messages.
Adjustments
- Adjusted
CustomerFacade::addCustomer()
,CustomerFacade::registerCustomer()
,CustomerFacade::updateCustomer()
,CustomerFacade::updateCustomerPassword()
,CustomerFacade::saveCustomerForOrder()
,CustomerFacade::saveOrderCustomer()
andCustomerFacade::anonymizeCustomer()
methods to apply configurable password policy validation on provided passwords. - Adjusted
CustomerFacade::restorePassword()
to apply configurable password policy validation when it is explicitly enabled by configuration. - Adjusted
Customer
to acceptCustomerPasswordPolicyValidatorInterface
as a dependency. - Moved password length check and related constants from
Customer
toLengthCustomerPasswordPolicy
.