Add more restrictions for user's password (Auth) about wasp HOT 8 CLOSED

  prismaClient.$use(async (params, next) => {
    // Ensure strong plaintext password. Must come before hashing middleware.
    // Throws an EntityValidationError on the first validation that fails.
    if (params.model === '{= userEntityUpper =}' && params.action === 'create') {
        const data = params.args.data || {}

        const defaultValidations = [
          { name: 'email must be present', fn: data => !!data.email },
          { name: 'password must be present', fn: data => !!data.password },
          { name: 'password must be at least 8 characters', fn: data => data.password.length >= 8 },
          { name: 'password must contain a number', fn: data => /\d/.test(data.password) },
        ]

        let validations = params.args._waspSkipDefaultValidations ? [] : defaultValidations
        if (Array.isArray(params.args._waspCustomValidations)) {
          validations = validations.concat(params.args._waspCustomValidations)
        }

        for (const validation of validations) {
          if (!validation.fn(data)) {
            throw new EntityValidationError('{= userEntityUpper =}', validation.name)
          }
        }

        // Remove from downstream Prisma processing to avoid "Unknown arg" error
        delete params.args._waspSkipDefaultValidations
        delete params.args._waspCustomValidations
    }

    const result = next(params)

    return result
  })

// Runs just our default validations
const newUser = context.entities.User.create({
        data: { email: '[email protected]', password: 'this will be hashed!' }
    })

// Runs no validations (previous behavior)
const newUser = context.entities.User.create({
        data: { email: '[email protected]', password: 'this will be hashed!' },
        _waspSkipDefaultValidations: true, // defaults to false
    })

// Runs just their validations
const newUser = context.entities.User.create({
        data: { email: '[email protected]', password: 'this will be hashed!' },
        _waspSkipDefaultValidations: true,
        _waspCustomValidations: [
          { name: 'password should not be "password"', fn: data => data.password !== 'password' },
          // More can be added below (note: it stops on first to return false)
        ]
    })