Password policy with FeathersJS

password_policy_hook.js

import makeDebug from 'debug'
import { getItems } from 'feathers-hooks-common'
import { BadRequest } from 'feathers-errors'
const debug = makeDebug('debug')

export function enforcePasswordPolicy (options = {}) {
  return async function (hook) {
    if (hook.type !== 'before') {
      throw new Error(`The 'enforePasswordPolicy' hook should only be used as a 'before' hook.`)
    }
    let app = hook.app
    let user = getItems(hook)
    let password = item.password
    if (password && app.getPasswordPolicy) {
      debug('Enforcing password policy on user', user)
      const validator = app.getPasswordPolicy()
      // First check the clear password
      let result = validator.validate(password, { list: true })
      if (result.length > 0) {
        throw new BadRequest('The provided password does not comply to the password policy', { failedRules: result })
      }
    }
    return hook
  }
}

// When configuring the user service
service.hooks({
  before: {
    create: [ enforcePasswordPolicy(), hashPassword() ]
  }
})