feat: update password validation to accept hash as special character in registration and setup schemas

backend/src/validators/authSchemas.test.ts

@@ -11,6 +11,15 @@ describe('registerSchema', () => {
     expect(result.success).toBe(true)
   })
 
+  it('accepts passwords with hash as special character', () => {
+    const result = registerSchema.safeParse({
+      email: 'test@example.com',
+      password: 'Password123#',
+      displayName: 'Test User',
+    })
+    expect(result.success).toBe(true)
+  })
+
   it('rejects invalid email', () => {
     const result = registerSchema.safeParse({
       email: 'not-an-email',

backend/src/validators/authSchemas.ts

@@ -1,12 +1,12 @@
 import { z } from 'zod'
 
-const passwordRegex = /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/
+const passwordRegex = /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&#])[A-Za-z\d@$!%*?&#]{8,}$/
 
 export const registerSchema = z.object({
   email: z.string().email().max(255),
   password: z.string()
     .min(8, 'Password must be at least 8 characters')
-    .regex(passwordRegex, 'Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character (@$!%*?&)'),
+    .regex(passwordRegex, 'Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character (@$!%*?&#)'),
   displayName: z.string().min(1, 'Display name is required').max(100),
 })
 
@@ -23,7 +23,7 @@ export const resetPasswordSchema = z.object({
   token: z.string().min(1, 'Token is required'),
   newPassword: z.string()
     .min(8, 'Password must be at least 8 characters')
-    .regex(passwordRegex, 'Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character (@$!%*?&)'),
+    .regex(passwordRegex, 'Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character (@$!%*?&#)'),
 })
 
 export const updateProfileSchema = z.object({
@@ -34,7 +34,7 @@ export const changePasswordSchema = z.object({
   currentPassword: z.string(),
   newPassword: z.string()
     .min(8, 'Password must be at least 8 characters')
-    .regex(passwordRegex, 'Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character (@$!%*?&)'),
+    .regex(passwordRegex, 'Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character (@$!%*?&#)'),
 })
 
 export const forgotPasswordSchema = z.object({

backend/src/validators/setupSchemas.test.ts

@@ -13,6 +13,11 @@ describe('setupSchema', () => {
     expect(result.success).toBe(true)
   })
 
+  it('accepts passwords with hash as special character', () => {
+    const result = setupSchema.safeParse({ ...baseValid, password: 'AdminPass123#' })
+    expect(result.success).toBe(true)
+  })
+
   it('accepts full setup including SMTP fields', () => {
     const result = setupSchema.safeParse({
       ...baseValid,

backend/src/validators/setupSchemas.ts

@@ -1,12 +1,12 @@
 import { z } from 'zod'
 
-const passwordRegex = /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/
+const passwordRegex = /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&#])[A-Za-z\d@$!%*?&#]{8,}$/
 
 export const setupSchema = z.object({
   email: z.string().email().max(255),
   password: z.string()
     .min(8, 'Password must be at least 8 characters')
-    .regex(passwordRegex, 'Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character (@$!%*?&)'),
+    .regex(passwordRegex, 'Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character (@$!%*?&#)'),
   displayName: z.string().min(1, 'Display name is required').max(100),
   siteTitle: z.string().min(1, 'Site title is required').max(255).optional(),
   language: z.enum(['en', 'nl']).optional(),