PUT /users/update doubles as the password-setup/reset call (userid + password only) for the new frontend create-password flow, and had no validation on that field at all. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
6.6 KiB
6.6 KiB