Fleet CTL: Surface password requirements to console for FleetCTL use, update API only password example (#14171)

server/fleet/users.go

@@ -353,7 +353,7 @@ func ValidatePasswordRequirements(password string) error {
 		return nil
 	}
 
-	return errors.New("Password does not meet required criteria")
+	return errors.New("Password does not meet required criteria: Must include 12 characters, at least 1 number (e.g. 0 - 9), and at least 1 symbol (e.g. &*#).")
 }
 
 // ValidateEmail checks that the provided email address is valid, this function

server/service/users.go

@@ -863,7 +863,7 @@ func (svc *Service) PerformRequiredPasswordReset(ctx context.Context, password s
 	}
 
 	if err := fleet.ValidatePasswordRequirements(password); err != nil {
-		return nil, fleet.NewInvalidArgumentError("new_password", "Password does not meet required criteria")
+		return nil, fleet.NewInvalidArgumentError("new_password", "Password does not meet required criteria: Must include 12 characters, at least 1 number (e.g. 0 - 9), and at least 1 symbol (e.g. &*#).")
 	}
 
 	user.AdminForcedPasswordReset = false