fix(admin-api): reject explicit empty passwords

This commit is contained in:
Lain Soykaf 2026-07-24 22:52:23 +04:00
commit 836f4a2d69
No known key found for this signature in database
4 changed files with 25 additions and 11 deletions

View file

@ -86,7 +86,8 @@ defmodule Pleroma.Web.ApiSpec.Admin.UserOperation do
type: :string,
description:
"Optional. When omitted, a `password_reset_link` is returned, " <>
"allowing the user to set their own password."
"allowing the user to set their own password. When provided, " <>
"it must not be empty."
}
},
required: [:nickname, :email]