🔐 Nueva Politica de Passwords — Zxcvbn

// ANTES (PS 1.7.x)
$command = new AddEmployeeCommand(
    'John', 'Doe', 'john@shop.com',
    'MyP@ss123', $defaultPage, $langId,
    $profileId, $shopAssociation
);

// AHORA (PS 8.0+)
$command = new AddEmployeeCommand(
    'John', 'Doe', 'john@shop.com',
    'MyP@ss123', $defaultPage, $langId,
    $profileId, $shopAssociation,
    $hasEnabledGravatar, // bool — nuevo
    $minLength,          // int  — nuevo
    $maxLength,          // int  — nuevo
    $minScore            // int  — nuevo (0-4)
);

// ANTES
$command->setPlainPassword('NewP@ss456');

// AHORA — requiere limites y score minimo
$command->setPlainPassword(
    'NewP@ss456',
    $minLength, // int
    $maxLength, // int
    $minScore   // int (0-4)
);

// ANTES
use PrestaShop\PrestaShop\Core\Domain\Employee\ValueObject\Password;
$password = new Password('MyP@ss123');
// Usaba Password::MIN_LENGTH / Password::MAX_LENGTH internamente

// AHORA — constantes eliminadas, parametros explicitos
$password = new Password(
    'MyP@ss123',
    8,   // minLength — configurable
    72,  // maxLength — configurable
    2    // minScore  — score Zxcvbn minimo
);

{* Campo password con wrapper de politica *}
{if $field.type === 'password'}
  <div class="field-password-policy">
    <input
      type="password"
      name="{$field.name}"
      id="field-{$field.name}"
      class="form-control"
      data-minlength="{$field.minLength}"
      data-maxlength="{$field.maxLength}"
      data-minscore="{$field.minScore}"
    />
    {* Indicador de fuerza — renderizado por JS *}
    <div class="password-strength-feedback"></div>
  </div>
{/if}

// Obtener los limites configurados en el BO
$minLength = (int) Configuration::get('PS_PASSWD_MIN_LENGTH', null, null, null, 8);
$maxLength = (int) Configuration::get('PS_PASSWD_MAX_LENGTH', null, null, null, 72);
$minScore  = (int) Configuration::get('PS_PASSWD_MIN_SCORE', null, null, null, 2);

// Validar un password antes de guardarlo
use PrestaShop\PrestaShop\Core\Domain\Employee\ValueObject\Password;

try {
    $password = new Password($plainPassword, $minLength, $maxLength, $minScore);
    // Password valido — continuar
} catch (\PrestaShop\PrestaShop\Core\Domain\Employee\Exception\InvalidEmployeePasswordException $e) {
    // Password no cumple la politica
    // $e->getCode() indica el tipo de error:
    // - PASSWORD_TOO_SHORT
    // - PASSWORD_TOO_LONG  
    // - PASSWORD_TOO_WEAK (score insuficiente)
}

// La libreria se carga asincronamente desde core.js
// Esperar a que este disponible:
function checkPasswordStrength(password) {
    if (typeof zxcvbn === 'undefined') {
        console.warn('Zxcvbn not loaded yet');
        return null;
    }
    
    const result = zxcvbn(password);
    // result.score: 0-4
    // result.feedback.warning: string con advertencia
    // result.feedback.suggestions: array de sugerencias
    
    return {
        score: result.score,
        warning: result.feedback.warning,
        suggestions: result.feedback.suggestions,
        crackTime: result.crack_times_display.offline_slow_hashing_1e4_per_second
    };
}

// Ejemplo: escuchar cambios en campo password
document.querySelector('input[type="password"]')
    .addEventListener('input', function(e) {
        const strength = checkPasswordStrength(e.target.value);
        if (strength) {
            updateStrengthIndicator(strength.score);
        }
    });