Client side password validation using PasswordPolicies

[waynemorphic]

@paulwer and I have been working on password validations to improve the user experience during registration. Keycloak added a passwordPolicies bean that exposes password policy data to Freemarker, which has been pretty helpful. This is what we have been able to achieve so far:

• Real-time password validation i.e An error is thrown on the client if a password does not meet password policies set
• Real-time password confirmation i.e. An error is thrown on the client if the password and the password confirmation do not match.
• This means that these errors do not have to appear on the UI after hitting the Registration button

Issue

Stuck on implementing password validation using checked input fields. This is partly because looping through passwordPolicies is not possible since it is neither a list nor a map. For context, here is an image of possibly what we seek to achieve:

References from other sources:

• Keyclokify
• Password Policies source extension

Some issues I have raised on Keycloak's repo

• Issue 1
• Issue 2