Skip to content
Tovari Docs

2026.08.18.1

Fixes

Section titled “Fixes”

validatePassword accepts whitespace-padded passwords Cognito rejects (KAN-1484) Passwords now need to be at least 12 characters instead of 8, matching the policy enforced by the authentication service. The app also trims leading and trailing spaces before checking a password, so a password that looks long enough but is mostly whitespace is now caught up front with a clear message instead of failing silently at the server. These changes apply everywhere you set or reset a password — sign-up, the reset-password flow, and the invitation acceptance screen — across the web app and the mobile app.

ForgotPasswordForm silent-return length guard surfaces no error to the user (KAN-1711) When resetting a forgotten password, entering a new password that was too short and submitting the form would cause it to appear frozen with no explanation. The form silently rejected the submission without telling the user what was wrong. A second related issue also allowed submitting the form without filling in the password confirmation, again with no feedback. The password reset form now displays a clear error message when the new password does not meet the minimum length requirement. The submit button also stays disabled until both the new password and confirmation are filled in. These changes ensure the password reset process always communicates what is needed to proceed.

Improvements

Section titled “Improvements”

Enable native Google sign-in on iOS and Android (KAN-1664) You can now sign in to the Tovari mobile app using your Google account on both iPhone and Android devices. Tapping the Google sign-in button on the login screen authenticates you with your existing Google credentials, so there is no need to create or remember a separate password. If you already have a Tovari account linked to your Google email, you are signed in to that account automatically. This provides a faster, more convenient way to access your financial data on the go.

Extract shared MIN_PASSWORD_LENGTH constant across workspaces (KAN-1712) Resetting your password now tells you exactly what’s wrong when your new password doesn’t meet the requirements, instead of appearing to do nothing. The password rules are also defined in one place across the web and mobile apps, so every screen that asks for a password shows the same, correct minimum length. This makes the reset-password experience clearer and more reliable.