Inconsistent validation of password length #27366

Node Version

22.22.2

Package Manager

npm

Package Manager Version

10.9.4

Strapi Version

5.40.0

Operating System

Linux (Debian/Ubuntu)

Database

PostgreSQL

Javascript or Typescript

Javascript

Bug Description

The maximal length of password fields seems to be checked against the plaintext password on the client side and against the password hash (alwags length 60) on the server side.

Steps to Reproduce

• create a password field and set maximal length
• enter a password in content-manager and try to save
• see the shown warning and check network tab to see wether the warning is caused by the client- or server-side validation
• repeat with defferent maximal lengths and different password lengths

Expected Behavior

The maximal length is always checked against the plaintext password.

Confirmation Checklist

• I have checked the existing issues for duplicates.
• I agree to follow this project's Code of Conduct.