@idea-ionic/auth 7.2.17 → 7.3.0

package/fesm2022/idea-ionic-auth.mjs

@@ -9,12 +9,1015 @@ import { IonicModule } from '@ionic/angular';
 import * as i2$1 from '@angular/router';
 import { RouterModule } from '@angular/router';
 import * as i2 from '@idea-ionic/common';
-import { IDEAEnvironment, IDEATranslationsModule } from '@idea-ionic/common';
+import { IDEAEnvironment, IDEATranslationsService, IDEATranslationsModule } from '@idea-ionic/common';
 import { Browser } from '@capacitor/browser';
 import { CognitoUserPool, AuthenticationDetails, CognitoUser, CognitoUserAttribute, CognitoRefreshToken } from 'amazon-cognito-identity-js';
 import { isEmpty } from 'idea-toolbox';
 import { toCanvas } from 'qrcode';
 
+const COMMON_PASSWORDS_TOP_1000 = [
+    '123456',
+    'password',
+    '12345678',
+    'qwerty',
+    '123456789',
+    '12345',
+    '1234',
+    '111111',
+    '1234567',
+    'dragon',
+    '123123',
+    'baseball',
+    'abc123',
+    'football',
+    'monkey',
+    'letmein',
+    '696969',
+    'shadow',
+    'master',
+    '666666',
+    'qwertyuiop',
+    '123321',
+    'mustang',
+    '1234567890',
+    'michael',
+    '654321',
+    'pussy',
+    'superman',
+    '1qaz2wsx',
+    '7777777',
+    'fuckyou',
+    '121212',
+    '000000',
+    'qazwsx',
+    '123qwe',
+    'killer',
+    'trustno1',
+    'jordan',
+    'jennifer',
+    'zxcvbnm',
+    'asdfgh',
+    'hunter',
+    'buster',
+    'soccer',
+    'harley',
+    'batman',
+    'andrew',
+    'tigger',
+    'sunshine',
+    'iloveyou',
+    'fuckme',
+    '2000',
+    'charlie',
+    'robert',
+    'thomas',
+    'hockey',
+    'ranger',
+    'daniel',
+    'starwars',
+    'klaster',
+    '112233',
+    'george',
+    'asshole',
+    'computer',
+    'michelle',
+    'jessica',
+    'pepper',
+    '1111',
+    'zxcvbn',
+    '555555',
+    '11111111',
+    '131313',
+    'freedom',
+    '777777',
+    'pass',
+    'fuck',
+    'maggie',
+    '159753',
+    'aaaaaa',
+    'ginger',
+    'princess',
+    'joshua',
+    'cheese',
+    'amanda',
+    'summer',
+    'love',
+    'ashley',
+    '6969',
+    'nicole',
+    'chelsea',
+    'biteme',
+    'matthew',
+    'access',
+    'yankees',
+    '987654321',
+    'dallas',
+    'austin',
+    'thunder',
+    'taylor',
+    'matrix',
+    'william',
+    'corvette',
+    'hello',
+    'martin',
+    'heather',
+    'secret',
+    'fucker',
+    'merlin',
+    'diamond',
+    '1234qwer',
+    'gfhjkm',
+    'hammer',
+    'silver',
+    '222222',
+    '88888888',
+    'anthony',
+    'justin',
+    'test',
+    'bailey',
+    'q1w2e3r4t5',
+    'patrick',
+    'internet',
+    'scooter',
+    'orange',
+    '11111',
+    'golfer',
+    'cookie',
+    'richard',
+    'samantha',
+    'bigdog',
+    'guitar',
+    'jackson',
+    'whatever',
+    'mickey',
+    'chicken',
+    'sparky',
+    'snoopy',
+    'maverick',
+    'phoenix',
+    'camaro',
+    'sexy',
+    'peanut',
+    'morgan',
+    'welcome',
+    'falcon',
+    'cowboy',
+    'ferrari',
+    'samsung',
+    'andrea',
+    'smokey',
+    'steelers',
+    'joseph',
+    'mercedes',
+    'dakota',
+    'arsenal',
+    'eagles',
+    'melissa',
+    'boomer',
+    'booboo',
+    'spider',
+    'nascar',
+    'monster',
+    'tigers',
+    'yellow',
+    'xxxxxx',
+    '123123123',
+    'gateway',
+    'marina',
+    'diablo',
+    'bulldog',
+    'qwer1234',
+    'compaq',
+    'purple',
+    'hardcore',
+    'banana',
+    'junior',
+    'hannah',
+    '123654',
+    'porsche',
+    'lakers',
+    'iceman',
+    'money',
+    'cowboys',
+    '987654',
+    'london',
+    'tennis',
+    '999999',
+    'ncc1701',
+    'coffee',
+    'scooby',
+    '0000',
+    'miller',
+    'boston',
+    'q1w2e3r4',
+    'fuckoff',
+    'brandon',
+    'yamaha',
+    'chester',
+    'mother',
+    'forever',
+    'johnny',
+    'edward',
+    '333333',
+    'oliver',
+    'redsox',
+    'player',
+    'nikita',
+    'knight',
+    'fender',
+    'barney',
+    'midnight',
+    'please',
+    'brandy',
+    'chicago',
+    'badboy',
+    'iwantu',
+    'slayer',
+    'rangers',
+    'charles',
+    'angel',
+    'flower',
+    'bigdaddy',
+    'rabbit',
+    'wizard',
+    'bigdick',
+    'jasper',
+    'enter',
+    'rachel',
+    'chris',
+    'steven',
+    'winner',
+    'adidas',
+    'victoria',
+    'natasha',
+    '1q2w3e4r',
+    'jasmine',
+    'winter',
+    'prince',
+    'panties',
+    'marine',
+    'ghbdtn',
+    'fishing',
+    'cocacola',
+    'casper',
+    'james',
+    '232323',
+    'raiders',
+    '888888',
+    'marlboro',
+    'gandalf',
+    'asdfasdf',
+    'crystal',
+    '87654321',
+    '12344321',
+    'sexsex',
+    'golden',
+    'blowme',
+    'bigtits',
+    '8675309',
+    'panther',
+    'lauren',
+    'angela',
+    'bitch',
+    'spanky',
+    'thx1138',
+    'angels',
+    'madison',
+    'winston',
+    'shannon',
+    'mike',
+    'toyota',
+    'blowjob',
+    'jordan23',
+    'canada',
+    'sophie',
+    'Password',
+    'apples',
+    'dick',
+    'tiger',
+    'razz',
+    '123abc',
+    'pokemon',
+    'qazxsw',
+    '55555',
+    'qwaszx',
+    'muffin',
+    'johnson',
+    'murphy',
+    'cooper',
+    'jonathan',
+    'liverpoo',
+    'david',
+    'danielle',
+    '159357',
+    'jackie',
+    '1990',
+    '123456a',
+    '789456',
+    'turtle',
+    'horny',
+    'abcd1234',
+    'scorpion',
+    'qazwsxedc',
+    '101010',
+    'butter',
+    'carlos',
+    'password1',
+    'dennis',
+    'slipknot',
+    'qwerty123',
+    'booger',
+    'asdf',
+    '1991',
+    'black',
+    'startrek',
+    '12341234',
+    'cameron',
+    'newyork',
+    'rainbow',
+    'nathan',
+    'john',
+    '1992',
+    'rocket',
+    'viking',
+    'redskins',
+    'butthead',
+    'asdfghjkl',
+    '1212',
+    'sierra',
+    'peaches',
+    'gemini',
+    'doctor',
+    'wilson',
+    'sandra',
+    'helpme',
+    'qwertyui',
+    'victor',
+    'florida',
+    'dolphin',
+    'pookie',
+    'captain',
+    'tucker',
+    'blue',
+    'liverpool',
+    'theman',
+    'bandit',
+    'dolphins',
+    'maddog',
+    'packers',
+    'jaguar',
+    'lovers',
+    'nicholas',
+    'united',
+    'tiffany',
+    'maxwell',
+    'zzzzzz',
+    'nirvana',
+    'jeremy',
+    'suckit',
+    'stupid',
+    'porn',
+    'monica',
+    'elephant',
+    'giants',
+    'jackass',
+    'hotdog',
+    'rosebud',
+    'success',
+    'debbie',
+    'mountain',
+    '444444',
+    'xxxxxxxx',
+    'warrior',
+    '1q2w3e4r5t',
+    'q1w2e3',
+    '123456q',
+    'albert',
+    'metallic',
+    'lucky',
+    'azerty',
+    '7777',
+    'shithead',
+    'alex',
+    'bond007',
+    'alexis',
+    '1111111',
+    'samson',
+    '5150',
+    'willie',
+    'scorpio',
+    'bonnie',
+    'gators',
+    'benjamin',
+    'voodoo',
+    'driver',
+    'dexter',
+    '2112',
+    'jason',
+    'calvin',
+    'freddy',
+    '212121',
+    'creative',
+    '12345a',
+    'sydney',
+    'rush2112',
+    '1989',
+    'asdfghjk',
+    'red123',
+    'bubba',
+    '4815162342',
+    'passw0rd',
+    'trouble',
+    'gunner',
+    'happy',
+    'fucking',
+    'gordon',
+    'legend',
+    'jessie',
+    'stella',
+    'qwert',
+    'eminem',
+    'arthur',
+    'apple',
+    'nissan',
+    'bullshit',
+    'bear',
+    'america',
+    '1qazxsw2',
+    'nothing',
+    'parker',
+    '4444',
+    'rebecca',
+    'qweqwe',
+    'garfield',
+    '01012011',
+    'beavis',
+    '69696969',
+    'jack',
+    'asdasd',
+    'december',
+    '2222',
+    '102030',
+    '252525',
+    '11223344',
+    'magic',
+    'apollo',
+    'skippy',
+    '315475',
+    'girls',
+    'kitten',
+    'golf',
+    'copper',
+    'braves',
+    'shelby',
+    'godzilla',
+    'beaver',
+    'fred',
+    'tomcat',
+    'august',
+    'buddy',
+    'airborne',
+    '1993',
+    '1988',
+    'lifehack',
+    'qqqqqq',
+    'brooklyn',
+    'animal',
+    'platinum',
+    'phantom',
+    'online',
+    'xavier',
+    'darkness',
+    'blink182',
+    'power',
+    'fish',
+    'green',
+    '789456123',
+    'voyager',
+    'police',
+    'travis',
+    '12qwaszx',
+    'heaven',
+    'snowball',
+    'lover',
+    'abcdef',
+    '00000',
+    'pakistan',
+    '007007',
+    'walter',
+    'playboy',
+    'blazer',
+    'cricket',
+    'sniper',
+    'hooters',
+    'donkey',
+    'willow',
+    'loveme',
+    'saturn',
+    'therock',
+    'redwings',
+    'bigboy',
+    'pumpkin',
+    'trinity',
+    'williams',
+    'tits',
+    'nintendo',
+    'digital',
+    'destiny',
+    'topgun',
+    'runner',
+    'marvin',
+    'guinness',
+    'chance',
+    'bubbles',
+    'testing',
+    'fire',
+    'november',
+    'minecraft',
+    'asdf1234',
+    'lasvegas',
+    'sergey',
+    'broncos',
+    'cartman',
+    'private',
+    'celtic',
+    'birdie',
+    'little',
+    'cassie',
+    'babygirl',
+    'donald',
+    'beatles',
+    '1313',
+    'dickhead',
+    'family',
+    '12121212',
+    'school',
+    'louise',
+    'gabriel',
+    'eclipse',
+    'fluffy',
+    '147258369',
+    'lol123',
+    'explorer',
+    'beer',
+    'nelson',
+    'flyers',
+    'spencer',
+    'scott',
+    'lovely',
+    'gibson',
+    'doggie',
+    'cherry',
+    'andrey',
+    'snickers',
+    'buffalo',
+    'pantera',
+    'metallica',
+    'member',
+    'carter',
+    'qwertyu',
+    'peter',
+    'alexande',
+    'steve',
+    'bronco',
+    'paradise',
+    'goober',
+    '5555',
+    'samuel',
+    'montana',
+    'mexico',
+    'dreams',
+    'michigan',
+    'cock',
+    'carolina',
+    'yankee',
+    'friends',
+    'magnum',
+    'surfer',
+    'poopoo',
+    'maximus',
+    'genius',
+    'cool',
+    'vampire',
+    'lacrosse',
+    'asd123',
+    'aaaa',
+    'christin',
+    'kimberly',
+    'speedy',
+    'sharon',
+    'carmen',
+    '111222',
+    'kristina',
+    'sammy',
+    'racing',
+    'ou812',
+    'sabrina',
+    'horses',
+    '0987654321',
+    'qwerty1',
+    'pimpin',
+    'baby',
+    'stalker',
+    'enigma',
+    '147147',
+    'star',
+    'poohbear',
+    'boobies',
+    '147258',
+    'simple',
+    'bollocks',
+    '12345q',
+    'marcus',
+    'brian',
+    '1987',
+    'qweasdzxc',
+    'drowssap',
+    'hahaha',
+    'caroline',
+    'barbara',
+    'dave',
+    'viper',
+    'drummer',
+    'action',
+    'einstein',
+    'bitches',
+    'genesis',
+    'hello1',
+    'scotty',
+    'friend',
+    'forest',
+    '010203',
+    'hotrod',
+    'google',
+    'vanessa',
+    'spitfire',
+    'badger',
+    'maryjane',
+    'friday',
+    'alaska',
+    '1232323q',
+    'tester',
+    'jester',
+    'jake',
+    'champion',
+    'billy',
+    '147852',
+    'rock',
+    'hawaii',
+    'badass',
+    'chevy',
+    '420420',
+    'walker',
+    'stephen',
+    'eagle1',
+    'bill',
+    '1986',
+    'october',
+    'gregory',
+    'svetlana',
+    'pamela',
+    '1984',
+    'music',
+    'shorty',
+    'westside',
+    'stanley',
+    'diesel',
+    'courtney',
+    '242424',
+    'kevin',
+    'porno',
+    'hitman',
+    'boobs',
+    'mark',
+    '12345qwert',
+    'reddog',
+    'frank',
+    'qwe123',
+    'popcorn',
+    'patricia',
+    'aaaaaaaa',
+    '1969',
+    'teresa',
+    'mozart',
+    'buddha',
+    'anderson',
+    'paul',
+    'melanie',
+    'abcdefg',
+    'security',
+    'lucky1',
+    'lizard',
+    'denise',
+    '3333',
+    'a12345',
+    '123789',
+    'ruslan',
+    'stargate',
+    'simpsons',
+    'scarface',
+    'eagle',
+    '123456789a',
+    'thumper',
+    'olivia',
+    'naruto',
+    '1234554321',
+    'general',
+    'cherokee',
+    'a123456',
+    'vincent',
+    'Usuckballz1',
+    'spooky',
+    'qweasd',
+    'cumshot',
+    'free',
+    'frankie',
+    'douglas',
+    'death',
+    '1980',
+    'loveyou',
+    'kitty',
+    'kelly',
+    'veronica',
+    'suzuki',
+    'semperfi',
+    'penguin',
+    'mercury',
+    'liberty',
+    'spirit',
+    'scotland',
+    'natalie',
+    'marley',
+    'vikings',
+    'system',
+    'sucker',
+    'king',
+    'allison',
+    'marshall',
+    '1979',
+    '098765',
+    'qwerty12',
+    'hummer',
+    'adrian',
+    '1985',
+    'vfhbyf',
+    'sandman',
+    'rocky',
+    'leslie',
+    'antonio',
+    '98765432',
+    '4321',
+    'softball',
+    'passion',
+    'mnbvcxz',
+    'bastard',
+    'passport',
+    'horney',
+    'rascal',
+    'howard',
+    'franklin',
+    'bigred',
+    'assman',
+    'alexander',
+    'homer',
+    'redrum',
+    'jupiter',
+    'claudia',
+    '55555555',
+    '141414',
+    'zaq12wsx',
+    'shit',
+    'patches',
+    'nigger',
+    'cunt',
+    'raider',
+    'infinity',
+    'andre',
+    '54321',
+    'galore',
+    'college',
+    'russia',
+    'kawasaki',
+    'bishop',
+    '77777777',
+    'vladimir',
+    'money1',
+    'freeuser',
+    'wildcats',
+    'francis',
+    'disney',
+    'budlight',
+    'brittany',
+    '1994',
+    '00000000',
+    'sweet',
+    'oksana',
+    'honda',
+    'domino',
+    'bulldogs',
+    'brutus',
+    'swordfis',
+    'norman',
+    'monday',
+    'jimmy',
+    'ironman',
+    'ford',
+    'fantasy',
+    '9999',
+    '7654321',
+    'PASSWORD',
+    'hentai',
+    'duncan',
+    'cougar',
+    '1977',
+    'jeffrey',
+    'house',
+    'dancer',
+    'brooke',
+    'timothy',
+    'super',
+    'marines',
+    'justice',
+    'digger',
+    'connor',
+    'patriots',
+    'karina',
+    '202020',
+    'molly',
+    'everton',
+    'tinker',
+    'alicia',
+    'rasdzv3',
+    'poop',
+    'pearljam',
+    'stinky',
+    'naughty',
+    'colorado',
+    '123123a',
+    'water',
+    'test123',
+    'ncc1701d',
+    'motorola',
+    'ireland',
+    'asdfg',
+    'slut',
+    'matt',
+    'houston',
+    'boogie',
+    'zombie',
+    'accord',
+    'vision',
+    'bradley',
+    'reggie',
+    'kermit',
+    'froggy',
+    'ducati',
+    'avalon',
+    '6666',
+    '9379992',
+    'sarah',
+    'saints',
+    'logitech',
+    'chopper',
+    '852456',
+    'simpson',
+    'madonna',
+    'juventus',
+    'claire',
+    '159951',
+    'zachary',
+    'yfnfif',
+    'wolverin',
+    'warcraft',
+    'hello123',
+    'extreme',
+    'penis',
+    'peekaboo',
+    'fireman',
+    'eugene',
+    'brenda',
+    '123654789',
+    'russell',
+    'panthers',
+    'georgia',
+    'smith',
+    'skyline',
+    'jesus',
+    'elizabet',
+    'spiderma',
+    'smooth',
+    'pirate',
+    'empire',
+    'bullet',
+    '8888',
+    'virginia',
+    'valentin',
+    'psycho',
+    'predator',
+    'arizona',
+    '134679',
+    'mitchell',
+    'alyssa',
+    'vegeta',
+    'titanic',
+    'christ',
+    'goblue',
+    'fylhtq',
+    'wolf',
+    'mmmmmm',
+    'kirill',
+    'indian',
+    'hiphop',
+    'baxter',
+    'awesome',
+    'people',
+    'danger',
+    'roland',
+    'mookie',
+    '741852963',
+    '1111111111',
+    'dreamer',
+    'bambam',
+    'arnold',
+    '1981',
+    'skipper',
+    'serega',
+    'rolltide',
+    'elvis',
+    'changeme',
+    'simon',
+    '1q2w3e',
+    'lovelove',
+    'fktrcfylh',
+    'denver',
+    'tommy',
+    'mine',
+    'loverboy',
+    'hobbes',
+    'happy1',
+    'alison',
+    'nemesis',
+    'chevelle',
+    'cardinal',
+    'burton',
+    'wanker',
+    'picard',
+    '151515',
+    'tweety',
+    'michael1',
+    '147852369',
+    '12312',
+    'xxxx',
+    'windows',
+    'turkey',
+    '456789',
+    '1974',
+    'vfrcbv',
+    'sublime',
+    '1975',
+    'galina',
+    'bobby',
+    'newport',
+    'manutd',
+    'daddy',
+    'american',
+    'alexandr',
+    '1966',
+    'victory',
+    'rooster',
+    'qqq111',
+    'madmax',
+    'electric',
+    'bigcock',
+    'a1b2c3',
+    'wolfpack',
+    'spring',
+    'phpbb',
+    'lalala',
+    'suckme',
+    'spiderman',
+    'eric',
+    'darkside',
+    'classic',
+    'raptor',
+    '123456789q',
+    'hendrix',
+    '1982',
+    'wombat',
+    'avatar',
+    'alpha',
+    'zxc123',
+    'crazy',
+    'hard',
+    'england',
+    'brazil',
+    '1978',
+    '01011980',
+    'wildcat',
+    'polina',
+    'freepass'
+];
+
 /**
  * Cognito wrapper to manage the authentication flow.
  *
@@ -24,6 +1027,7 @@ class IDEAAuthService {
     constructor(storage) {
         this.storage = storage;
         this.env = inject(IDEAEnvironment);
+        this.t = inject(IDEATranslationsService);
         this.deviceKeyAttribute = 'custom:'.concat(this.env.idea.project);
         this.userPool = new CognitoUserPool({
             UserPoolId: this.env.aws.cognito.userPoolId,
@@ -452,6 +1456,33 @@ class IDEAAuthService {
             errors.push('REQUIRE_UPPERCASE');
         return errors;
     }
+    /**
+     * Validate the password against offline and online databases, to avoid common and exploited passwords.
+     */
+    async validatePasswordAgainstDatabases(password, customStringsToAvoid) {
+        const errors = [];
+        let pwd = (password || '').trim().toLowerCase();
+        const pwdContains = (str) => pwd.includes((str || '').trim().toLowerCase());
+        const projectReferencesToAvoid = [this.env.idea.project, this.env.idea.auth.title, this.t._('COMMON.APP_NAME')];
+        if (projectReferencesToAvoid.some(x => pwdContains(x)))
+            errors.push('COMMON_PASSWORD_PROJECT');
+        if (customStringsToAvoid && customStringsToAvoid.some(x => pwdContains(x)))
+            errors.push('COMMON_PASSWORD_CUSTOM');
+        if (COMMON_PASSWORDS_TOP_1000.some(x => pwdContains(x)))
+            errors.push('COMMON_PASSWORD_INTERNAL');
+        if (errors.length === 0) {
+            const pwdSHA1 = await SHA1(password);
+            if (pwdSHA1) {
+                const res = await fetch('https://api.pwnedpasswords.com/range/'.concat(pwdSHA1.slice(0, 5)));
+                if (res.status === 200) {
+                    const pwnedPasswordsRawSuffixes = await res.text();
+                    if (pwnedPasswordsRawSuffixes.includes(pwdSHA1.slice(5)))
+                        errors.push('COMMON_PASSWORD_EXTERNAL');
+                }
+            }
+        }
+        return errors;
+    }
     /**
      * Get a complete password policy pattern, based on the environments configuration, to use on password input fields.
      * Note: some of the symbols couldn't be included because unsupported by the input[pattern] attribute.
@@ -486,6 +1517,18 @@ var LoginOutcomeActions;
     LoginOutcomeActions["MFA_CHALLENGE"] = "mfaChallenge";
     LoginOutcomeActions["MFA_SETUP"] = "mfaSetup";
 })(LoginOutcomeActions || (LoginOutcomeActions = {}));
+/**
+ * Get the SHA1 hex uppercase hash of a string, using web crypto.
+ */
+const SHA1 = async (str) => {
+    if (!window.crypto)
+        return null;
+    const msgUint8 = new TextEncoder().encode(str);
+    const hashBuffer = await window.crypto.subtle.digest('SHA-1', msgUint8);
+    const hashArray = Array.from(new Uint8Array(hashBuffer));
+    const hashHex = hashArray.map(b => b.toString(16).padStart(2, '0')).join('');
+    return hashHex.toUpperCase();
+};
 
 class IDEASignInPage {
     constructor(navCtrl, message, loading, t, auth) {
@@ -640,21 +1683,25 @@ class IDEASignUpPage {
                 : true;
     }
     async register() {
-        this.errorMsg = null;
-        if (isEmpty(this.email, 'email'))
-            this.errorMsg = this.t._('IDEA_AUTH.VALID_EMAIL_OBLIGATORY');
-        else {
-            const errors = this.auth.validatePasswordAgainstPolicy(this.password);
-            if (errors.length)
-                this.errorMsg = [
-                    this.t._('IDEA_AUTH.PASSWORD_REQUIREMENTS_FOLLOW'),
-                    ...errors.map(x => this.t._('IDEA_AUTH.PASSWORD_REQUIREMENTS.'.concat(x), { n: this.passwordPolicy.minLength }))
-                ].join(' ');
-        }
-        if (this.errorMsg)
-            return this.message.error('IDEA_AUTH.REGISTRATION_FAILED');
         try {
             await this.loading.show();
+            this.errorMsg = null;
+            if (isEmpty(this.email, 'email'))
+                this.errorMsg = this.t._('IDEA_AUTH.VALID_EMAIL_OBLIGATORY');
+            else {
+                const errors = this.auth.validatePasswordAgainstPolicy(this.password);
+                if (errors.length === 0 && this.passwordPolicy.advancedPasswordCheck) {
+                    const emailParts = [...this.email?.split('@')[0].split(/\W/g)];
+                    errors.push(...(await this.auth.validatePasswordAgainstDatabases(this.password, emailParts)));
+                }
+                if (errors.length)
+                    this.errorMsg = [
+                        this.t._('IDEA_AUTH.PASSWORD_REQUIREMENTS_FOLLOW'),
+                        ...errors.map(x => this.t._('IDEA_AUTH.PASSWORD_REQUIREMENTS.'.concat(x), { n: this.passwordPolicy.minLength }))
+                    ].join(' ');
+            }
+            if (this.errorMsg)
+                return this.message.error('IDEA_AUTH.REGISTRATION_FAILED');
             await this.auth.register(this.email, this.password);
             this.message.success('IDEA_AUTH.REGISTRATION_COMPLETED');
             this.goToAuth();
@@ -706,8 +1753,11 @@ class IDEANewPasswordPage {
     }
     async confirmNewPassword() {
         try {
+            await this.loading.show();
             this.errorMsg = null;
             const errors = this.auth.validatePasswordAgainstPolicy(this.newPassword);
+            if (errors.length === 0 && this.passwordPolicy.advancedPasswordCheck)
+                errors.push(...(await this.auth.validatePasswordAgainstDatabases(this.newPassword)));
             if (errors.length)
                 this.errorMsg = [
                     this.t._('IDEA_AUTH.PASSWORD_REQUIREMENTS_FOLLOW'),
@@ -715,7 +1765,6 @@ class IDEANewPasswordPage {
                 ].join(' ');
             if (this.errorMsg)
                 return this.message.error('IDEA_AUTH.PASSWORD_REQUIREMENTS_FOLLOW');
-            await this.loading.show();
             await this.auth.confirmNewPassword(this.newPassword);
             window.location.assign('');
         }
@@ -838,8 +1887,13 @@ class IDEAConfirmPasswordPage {
     }
     async confirmPassword() {
         try {
+            await this.loading.show();
             this.errorMsg = null;
             const errors = this.auth.validatePasswordAgainstPolicy(this.newPassword);
+            if (errors.length === 0 && this.passwordPolicy.advancedPasswordCheck) {
+                const emailParts = [...this.email?.split('@')[0].split(/\W/g)];
+                errors.push(...(await this.auth.validatePasswordAgainstDatabases(this.newPassword, emailParts)));
+            }
             if (errors.length)
                 this.errorMsg = [
                     this.t._('IDEA_AUTH.PASSWORD_REQUIREMENTS_FOLLOW'),
@@ -847,7 +1901,6 @@ class IDEAConfirmPasswordPage {
                 ].join(' ');
             if (this.errorMsg)
                 return this.message.error('IDEA_AUTH.PASSWORD_REQUIREMENTS_FOLLOW');
-            await this.loading.show();
             await this.auth.confirmPassword(this.email, this.code, this.newPassword);
             this.message.success('IDEA_AUTH.PASSWORD_CHANGED');
             this.goToAuth();