search

apache / airavata-custos

Apache Airavata Custos Security
https://airavata.apache.org/custos
Apache License 2.0
13 stars 27 forks source link

API method to get whether a user needs to update their password #176

Closed machristie closed 1 year ago

machristie commented 3 years ago

Sometimes a user's password needs to be updated before they can login, such as during a user migration from one backend to another when the stored password can't also be migrated. An API method that would return a boolean of whether a user's password needs to be updated would be helpful in this case. Clients could then direct users to a reset password form so that they can update their password.

In the past, I implemented something similar in PHP against the Keycloak REST API, by checking for UPDATE_PASSWORD in the user's requiredActions: https://github.com/apache/airavata-php-gateway/blob/1a3956711af99fd9ad8d8c9e9496e7c7b1ca3c91/app/libraries/Keycloak/Keycloak.php#L390

machristie commented 3 years ago

@isururanawaka FYI, I have the frontend changes done for this now. I just need this API method to finish it: https://issues.apache.org/jira/browse/AIRAVATA-3463