The specification requires that the validation result must be returned in the getResult Method of the PasswordValidationCallback. This is currently not the case.
I just created a pull request with a bugfix for this. It's a simple one-liner. Shall I create pull requests for the other branches as well or is there a better way?
No need for additional PRs. The committers will backport as necessary.
Thanks for the report and the PR. And extra thanks for including a test case. Fixed in: - 10.1.x for 10.1.0-M5 onwards - 10.0.x for 10.0.11 onwards - 9.0.x for 9.0.53 onwards - 8.5.x for 8.5.71 onwards