fix: $minimumPasswordLength is not in characters but in bytes

Author: kenjis

src/Authentication/Passwords/CompositionValidator.php

@@ -32,7 +32,7 @@ public function check(string $password, ?User $user = null): Result
             throw AuthenticationException::forUnsetPasswordLength();
         }
 
-        $passed = strlen($password) >= $this->config->minimumPasswordLength;
+        $passed = mb_strlen($password) >= $this->config->minimumPasswordLength;
 
         if (! $passed) {
             return new Result([

tests/Unit/CompositionValidatorTest.php

@@ -51,6 +51,19 @@ public function testCheckFalse(): void
         );
     }
 
+    public function testCheckFalseMultibyte(): void
+    {
+        $password = '🍣😀';
+
+        $result = $this->validator->check($password);
+
+        $this->assertFalse($result->isOK());
+        $this->assertSame(
+            lang('Auth.errorPasswordLength', [$this->config->minimumPasswordLength]),
+            $result->reason()
+        );
+    }
+
     public function testCheckTrue(): void
     {
         $password = '1234567890';