title: Laravel : Reset password get 6 digits without validation
body: <p>I have simple function to reset my password. In my function there is minimum requirement for <code>password</code> value is <code>1 digit</code> but when i try to update the password it is not updated, when i put <code>6 digits</code> in password it is working fine.</p>
  
  <p>I found that in <code>vendor\laravel\framework\src\Illuminate\Auth\Passwords</code> a <code>passwordBroker.php</code>file has one function </p>
  
  <pre><code> protected function validatePasswordWithDefaults(array $credentials)
  {
      list($password, $confirm) = [
          $credentials['password'],
          $credentials['password_confirmation'],
      ];
  
      return $password === $confirm &amp;&amp; mb_strlen($password) &gt;= 6; // here it is
  }
  </code></pre>
  
  <p>and  it contains validation  that <code>($password) &gt;= 6</code> how can i remove it, when i changes in this file it is working. on my <code>.gitignore</code> <code>vendor</code> folder not updated in live. what is the solution ? how can override this validation ?</p>
  
  <p>for reference here is my <code>resetpassword</code> function</p>
  
  <pre><code>public function resetPassword(ResetPasswordRequest $request, JWTAuth $JWTAuth)
  {
      $validator = Validator::make($request-&gt;all(), User::resetPasswordRules());
      if ($validator-&gt;fails()) {
          return response()-&gt;json([
              'message'       =&gt; "422 Unprocessable Entity",
              'errors'        =&gt; $validator-&gt;messages(),
              'status_code'   =&gt; 422,
          ]);
      }
  
  
      $response = $this-&gt;broker()-&gt;reset(
          $this-&gt;credentials($request), function ($user, $password) {
              $this-&gt;reset($user, $password);
          }
      );
  
      if($response !== Password::PASSWORD_RESET) {
          return response()-&gt;json([
                  'message'       =&gt; "Internal Server Error",
                  'status_code'   =&gt; 500,
              ]);
      }
      $user = User::where('email', '=', $request-&gt;get('email'))-&gt;first();
      $user-&gt;UserDeviceData()-&gt;firstOrCreate([
          'device_id' =&gt; $request-&gt;device_id
      ]);
  
       return (new UserTransformer)-&gt;transform($user,[
          'request_type'  =&gt; 'reset_password',
          'token'         =&gt;  $JWTAuth-&gt;fromUser($user)
      ]);
  }
  </code></pre>