Using Django Password Validators

I see Djoser has it’s own method of providing password validation which does not use the Django AUTH_PASSWORD_VALIDATORS and will not accept identical arguments. Is there a reason for this? Wouldn’t it be simpler to work directly with what is provided by Django auth (https://docs.djangoproject.com/en/1.9/topics/auth/passwords/) ?

[pszpetkowski]

After discussing the matter internally with @haxoza and @michalbon we believe that https://github.com/orcasgit/django-password-validation will be a solution for for Django 1.8 users, so I suppose that we might as well get rid of PASSWORD_VALIDATORS from Djoser settings for 0.7.0 and we will simply use Django Password Validation as we should.

[moatazsoli]

You can do this in your settings.py

AUTH_PASSWORD_VALIDATORS = [
    {
        'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
    },
]

Then also in settings.py for DJOSER Settings:

from django.contrib.auth import password_validation

DJOSER = {
    'PASSWORD_RESET_CONFIRM_URL': '#/password/reset/confirm/{uid}/{token}',
    'ACTIVATION_URL': '#/activate/{uid}/{token}',
    'PASSWORD_VALIDATORS': [password_validation.validate_password]
}

works for me!