from app.core.password_policy import validate_password_strength
import pytest


def test_password_policy_rejects_denied_password():
    with pytest.raises(ValueError, match="too common"):
        validate_password_strength("Password123")
