delight-im / delight-im/PHP-Auth

Force user to change password on next sign in

Open
#115 9 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
PHP
Stars
1.2k
Forks
237
PR merge metrics
No merged PRs in 30d

Description

Hey there,

Just wondering if there's any feature in the library to target a user by their id/email address and force them to change their password on their next sign in? For me, this would allow the users of an application I'm building (the administration team) to create user accounts on behalf of other users (organisation-external members), with a temporary password, and force the user to change their password on sign in. Should I go about this by keeping track in a separate table referencing their ID's etc?

Love this library so much, thanks for any help!

Cheers

Contributor guide

No contributing guide indexed for this repository

Research direction

The issue names no files or tests; start by locating the library’s sign-in, user lookup, and password-change entry points. Clarify how a temporary-password state should be stored and consumed, then define tests showing that the next sign-in requires a change and subsequent sign-ins do not.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.