fix(auth): address PR review findings on password reset page

- Sync .env.example password pattern with new config default (adds +,
  enforces allowed-charset body) and add missing AUTH_PASSWORD_MIN_LENGTH,
  AUTH_PASSWORD_ALLOWED_SPECIAL_CHARACTERS_TEXT, and AUTH_PASSWORD_SHAPE_LIST keys
- Harden shape_list in reset.blade.php with Js::from() to prevent JS
  parse errors from quotes or backslashes in the config value
- Add aria-label to the disabled email field so screen readers announce
  its accessible name

Author: mulldug

.env.example

@@ -110,8 +110,11 @@ MAIL_SEND_WELCOME_EMAIL=1
 DEFAULT_PROFILE_IMAGE=
 
 AUTH_PASSWORD_RESET_LIFETIME=1800
-AUTH_PASSWORD_SHAPE_PATTERN="^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$%^&*-])"
-AUTH_PASSWORD_SHAPE_WARNING="Password must include at least one uppercase letter, one lowercase letter, one number, and one special character."
+AUTH_PASSWORD_MIN_LENGTH=10
+AUTH_PASSWORD_SHAPE_PATTERN="^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$%^&*+-])[A-Za-z0-9#?!@$%^&*+-]+$"
+AUTH_PASSWORD_SHAPE_WARNING="Password must include at least one uppercase letter, one lowercase letter, one number, and one special character (#?!@$%^&*+-)."
+AUTH_PASSWORD_ALLOWED_SPECIAL_CHARACTERS_TEXT="#?!@$%^&*+-"
+AUTH_PASSWORD_SHAPE_LIST="Uppercase letter,Lowercase letter,One number,Special character"
 
 
 OAUTH2_VALIDATE_RESOURCE_SERVER_IP=true

resources/js/reset_password/reset_password.js

@@ -126,6 +126,7 @@ const ResetPasswordPage = ({
                     hiddenLabel
                     value={formik.values.email}
                     disabled={true}
+                    inputProps={{ 'aria-label': 'Email address' }}
                     InputProps={{ disableUnderline: true }}
                 />
               </Grid>

resources/views/auth/passwords/reset.blade.php

@@ -26,7 +26,7 @@
             allowed_special_characters: '{{ Config::get("auth.password_allowed_special_characters") }}',
             allowed_special_characters_text: {{ Illuminate\Support\Js::from(Config::get("auth.password_allowed_special_characters_text")) }},
             shape_warning: '{{ Config::get("auth.password_shape_warning") }}',
-            shape_list: '{{ Config::get("auth.password_shape_list") }}'
+            shape_list: {{ Illuminate\Support\Js::from(Config::get("auth.password_shape_list")) }}
         }
         @if ($errors->any())
                 @foreach($errors->all() as $error)