[Outreachy Task Submission] Weak Passwords Creating Accounts

[Chiemezuo]

Introduction

In the current state of the Ushahidi platform, when trying to register an account, users are prompted when their passwords are too weak. However, once they hit the minimum character requirements, weak passwords can still create accounts.

How to Reproduce this behavior

1. Open the Ushahidi platform (either via a deployment or Localhost)
2. Click on Login & Signup.
3. Switch to the Signup view and fill in the form (except the password form).
4. For the password, fill in something that only meets the minimum length constraints but ignores other constraints (for example "adminooo"). Note: you can copy and paste the example.
5. You will notice that the password hint suggests that your password is very weak.
6. Agree to the terms and conditions.
7. Create an account.
8. Account creation works.

My proposal

When the password is very weak, users should not be allowed to create accounts so as not to undermine their security.