forked from baron/baron-sso
- Add nil check for DescopeClient before accessing password policy. - Use fallback password policy (min 8 chars) if DescopeClient is nil or policy fetch fails. - Ensure 400 Bad Request is returned for weak passwords even in test environments without DescopeClient. - Fix syntax errors introduced during manual edit.