Back to Developer changelog

Vulnerable password validation on the Storefront API's Customer object

API

Effective November 16, 2021

Validation to identify vulnerable passwords has been added to the Storefront API's customerReset and customerResetByUrl mutations.

Now, when you try resetting a password to one that’s considered vulnerable, the API will return an error.