Rifiuta il riuso della password attuale in cambio e reset.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-08 11:31:47 +02:00
parent 53449c5d3c
commit dd9901519a
17 changed files with 60 additions and 0 deletions
@@ -40,6 +40,12 @@ module Public
        return render :edit, status: :unprocessable_entity
      end

+      if PasswordComplexity.same_as_current?(@user, params[:password])
+        flash.now[:alert] = t("flash.password_resets.password_same_as_current")
+        @token = params[:token]
+        return render :edit, status: :unprocessable_entity
+      end
+
      @user.update!(password: params[:password])
      @user.clear_password_reset!
      redirect_to public_login_path, notice: t("flash.password_resets.password_updated")