Invalid characters in password

[Richard Schwab]

Hello,

when I'm trying to reset my password for my Ubuntu One account via
https://login.launchpad.net/token/$token/+resetpassword/$email I'm
getting the following error:

Invalid characters in password

Since there are no restrictions for valid characters in passwords
mentioned I believe this is a bug.
If this is intended it should be documented to reflect which characters
are allowed/forbidden.

The JS-based password strength checker is all green, after submitting
the form it complains with the error above.

I have tried setting the following passwords which were all not acccepted:

- ·ó®.~»]H¦'éª7]H´¬æQd-Fä`³UÊÀó*X$u¥6ÝÅØDÏ&Q_añ¨(!©Õ
- ÊØWä(\D¢Ø¼=Vz2BÂÑó'¯_meV.Gs9,i´ÃÇagb¡n:`¶D=6×}\å3u
- íM_÷"%?s]×%{7Z{qÔA,?8zQÈô]{õDezHsU¢¦;ß¹æÄn4ÀiÔ+¿-w
- ür§:##è"ñtèëåúú/iä²äV»ñú3'Ò=º[Í7AÖ>æ¡BΫ"Æ\EGF:cض
- ({L-{"Ý;Ò5v/È3BÙè6Áý¤øÃÒ3¢¿ò}ï;Ò±4ðØ*K¾eà)ìþ!$qôäß

Best regards,
Richard Schwab

[Daniel Manrique (roadmr)]

In the validation code:

"
Validation is successful if:
    - password contains at least 8 characters
    - password contains only ascii characters
    - password doesn't match leaked credentials for account
    - password doesn't match leaked credentials for email
"

But you're right that the ascii character requirement is not surfaced to the user. I'll mark this as a bug needing fixing. Thanks!