If i want to change passwords via the management api (https://auth0.com/docs/authenticate/database-connections/password-change#use-the-management-api), can i rely on it to also validate the password complexity rules set on the database connection?
Hi @nics0, and thank you for your question!
Yes, absolutely! I can see this is something that is missing from our documentation, and I will let the team know.
When you try to change a user’s password to something that doesn’t follow the complexity you have configured in the dashboard, you will get a 400 error with an appropriate message:
I encourage you to test it as well, so you can rest assured!
Sincerely,
Teodor.