Rifiuta il riuso della password attuale in cambio e reset.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-08 11:31:47 +02:00
parent 53449c5d3c
commit dd9901519a
17 changed files with 60 additions and 0 deletions
@@ -24,6 +24,11 @@ module Admin
        return render :edit, status: :unprocessable_entity
      end

+      if PasswordComplexity.same_as_current?(current_admin_account, params[:password])
+        flash.now[:alert] = t("admin.flash.password_same_as_current")
+        return render :edit, status: :unprocessable_entity
+      end
+
      if current_admin_account.update(password: params[:password])
        redirect_to admin_root_path, notice: t("admin.flash.password_updated")
      else