Password matching using express-validator

[wisammechano]

Many students were running to issues using the password matching to 1 uppercase, 1 lowercase, and 1 number issue because the library has changed is the isStrongPassword method is not available anymore. Students have to use an advanced regular expression to test for passwords which is not a best practice and is very buggy.

It is advised to use another library for password strength checks like password-validator.

references:

https://stackoverflow.com/questions/43127814/regex-for-at-least-1-number-1-lower-case-and-1-upper-case-letter

[wisammechano]

Stackoverflow answer is incorrectly reporting this as deprecated. However, because the library uses another library validatorjs, the documentation is incomplete and one needs to dig further into the other library to understand some of the methods.

Still the official solution is using a regex to check password strength which is not the best approach. It can be solved using express-validator like this:

check("password", "Password must be at least 5 characters long")
    .notEmpty()
    .withMessage("Password should not be empty")
    .isLength({ min: 5 })
    .isStrongPassword({
      minLength: 5,
      minLowercase: 1,
      minUppercase: 1,
      minNumbers: 1,
      minSymbols: 0,
    })
    .withMessage("Password must contain a number, uppercase and lowercase")