MSD-LIVE / issues

0 stars 0 forks source link

Password Reset Not Working if User Has Temporary Password #1

Closed devinsm closed 1 year ago

devinsm commented 2 years ago

When we create projects we can create new user accounts. When we do this, the user receives an email with a temporary password. If they use the temporary password to sign in, they will be prompted to create a permanent password and all is good. If however they don't use the temporary password and forget they received it, then they will be unable to reset their password. This is because AWS puts the user in the FORCE_CHANGE_PASSWORD state, and doesn't allow password reset links to be sent.

We need to hack around AWS so that if the user ignores the temporary password, they can simply go to the password reset page and things will work as expected.