Merge pull request 'Validate signup email and password strength' (#155) from feature/150-signup-credential-validation into main

Reviewed-on: #155

templates/frontend/register-page.php

@@ -1,6 +1,7 @@
 <?php
 declare(strict_types=1);
 
+use Unsupervised\Schedular\Auth\PasswordPolicy;
 use Unsupervised\Schedular\Registration\Question;
 use Unsupervised\Schedular\Registration\QuestionField;
 
@@ -67,7 +68,15 @@ if (! defined('ABSPATH')) {
                     </p>
                     <p>
                         <label for="us-reg-pass"><?php esc_html_e('Password', 'unsupervised-schedular'); ?></label>
-                        <input type="password" name="password" id="us-reg-pass" autocomplete="new-password" minlength="8" required>
+                        <input type="password" name="password" id="us-reg-pass" autocomplete="new-password" minlength="<?php echo esc_attr((string) PasswordPolicy::MIN_LENGTH); ?>" required aria-describedby="us-reg-pass-strength">
+                        <?php
+                        /*
+                         * Filled in by register.js. `aria-live` announces the verdict as
+                         * it changes, and it starts empty so nothing is announced — or
+                         * takes up space — before anything has been typed.
+                         */
+                        ?>
+                        <span class="us-password-strength" id="us-reg-pass-strength" role="status" aria-live="polite"></span>
                     </p>
 
                     <fieldset class="us-guardian">