allowsAuthentication method

bool allowsAuthentication(
  1. String password
)

Returns whether password is safe to send to the password verifier.

Authentication deliberately does not enforce the minimum length: older records may predate the current registration policy and must still be able to authenticate and rehash. The maximum remains enforced to bound verifier work.

Implementation

bool allowsAuthentication(String password) =>
    password.length <= maximumLength;