fix(users): add password validations

[Riddhiagrawal001]

Type of Change

• Bugfix
• New feature
• Enhancement
• Refactoring
• Dependency updates
• Documentation
• CI/CD

Description

The mandatory condition for the password field was just not be empty . Following the PR, the password field will be subject to the following checks:
1.The password must be between 8 and 70 characters in length.
2.It must include at least one uppercase character.
3.It must include at least one lowercase character.
4.It must include at least one special character.
5.It must include at least one numeric character.
6.It must not contain whitespace.

Additional Changes

• This PR modifies the API contract
• This PR modifies the database schema
• This PR modifies application configuration/environment variables

Motivation and Context

Closes #4412

How did you test it?

1.Signup API ( local testing)

curl --location 'http://localhost:8080/user/signup' \
--header 'Content-Type: application/json' \
--data-raw '{
    "email": "email value",
    "password": "456667sdvh",
    "country": "IN"
}'

Failure case response

    "error": {
        "type": "invalid_request",
        "message": "Invalid Password",
        "code": "UR_09"
    }
} 

2.Reset Password API (local testing)

curl --location 'http://localhost:8080/user/reset_password' \
--header 'Content-Type: application/json' \
--data '{
    "password": "456667sdvd",
    "token":"token from email after clicking Reset password in dashboard"
}'

Failure case response

{
    "error": {
        "type": "invalid_request",
        "message": "Invalid Password",
        "code": "UR_09"
    }
} 

Checklist

• I formatted the code cargo +nightly fmt --all
• I addressed lints thrown by cargo clippy
• I reviewed the submitted code
• I added unit tests for my changes where possible

[apoorvdixit88]

variable name special_char, its a single char

[Riddhiagrawal001]

Changed to specialchars to special_char

[apoorvdixit88]

may be new_password_without_validation,
we are not validating the password in merchant create request?

[Riddhiagrawal001]

We're retrieving user details from the database to create a new merchant. It's possible that some old users didn't followed the password convention. Therefore, we've implemented a workaround specifically for this scenario to bypass validation.

[apoorvdixit88]

The password must be between 8 and 50 characters in length
Please change description, as per code the maximum length allowed is 70

Also if possible swap description and motivation and context content.

[racnan]

special_char can be a &char, lets not force it to be owned type.

Suggested change

	let special_char: char = *special_chars.choose(&mut rng).unwrap_or(&'@');
	let special_char = special_chars.choose(&mut rng).unwrap_or(&'@');

[Riddhiagrawal001]

Addressed

[racnan]

Lets make return type as Secret<String>

[Riddhiagrawal001]

Addressed

[racnan]

LGTM