Define a public API interface PasswordPolicy that exposes a password validation method
The password policy is evaluted by the db-based identity provider whenever a user is created
Create a default implementation => check for best practices guides, e.g. OWASP
default password policy is disabled by default
there is a boolean engine configuraiton property to enable the password policy; throw an exception if this value is set to true but no password policy is defined
the demo users of the distros should still have the short passwords that they have now
This is the controller panel for Smart Panels app
[CAM-9929] I can implement a password policy for engine-managed users