apache/answer · error

password validation failed: %w

Error message

password validation failed: %w

What it means

Fires in ResetPassword when the password supplied via --password fails checker.CheckPassword (the app's shared password policy: length and character-class requirements). The guard is a validation helper; the at-fault input is the command-line password string that violates policy.

Source

Thrown at internal/cli/reset_password.go:128

		email = strings.TrimSpace(emailInput)
	}

	userInfo, exist, err := userRepo.GetByEmail(ctx, email)
	if err != nil {
		return fmt.Errorf("query user failed: %w", err)
	}
	if !exist {
		return fmt.Errorf("user not found: %s", email)
	}

	fmt.Printf("You are going to reset password for user: %s\n", email)

	password := strings.TrimSpace(opts.Password)

	if password != "" {
		printWarning("Passing password via command line may be recorded in shell history")
		if err := checker.CheckPassword(password); err != nil {
			return fmt.Errorf("password validation failed: %w", err)
		}
	} else {
		password, err = promptForPassword()
		if err != nil {
			return fmt.Errorf("password input failed: %w", err)
		}
	}

	if !confirmAction(fmt.Sprintf("This will reset password for user '[%s]%s'. Continue?", userInfo.DisplayName, email)) {
		fmt.Println("Operation cancelled")
		return nil
	}

	hashPwd, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
	if err != nil {
		return fmt.Errorf("encrypt password failed: %w", err)
	}

View on GitHub (pinned to 3b9f137061)

Solutions

1. Review the inner CheckPassword error for the specific rule violated (length, character classes, dictionary words)
2. Supply a stronger password meeting the password policy (length, mixed case, digits, symbols)
3. Enter the password interactively when prompted instead of passing it on the command line to iterate quickly

When it happens

Trigger: Thrown at internal/cli/reset_password.go:128 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of apache/answer@3b9f137061 (2026-09-05). Data as JSON: /api/errors/ae3bf15ae566a964. Report an issue: GitHub.