Password policy violations are not handled by the backend, so the only place to discover what is happening is the kratos logs, or decoding an "unhandled kratos error code".
This is compounded by #671 where the errors are not propagated to the user, and therefore the reset password flow just appears unresponsive when the "Reset Password" button is pressed.
To reproduce:
- Attempt to change a user password to a password that has already been used.