delight-im / delight-im/PHP-Auth
Force user to change password on next sign in
- Dominant language
- PHP
- Stars
- 1.2k
- Forks
- 237
- PR merge metrics
- No merged PRs in 30d
Description
Hey there,
Just wondering if there's any feature in the library to target a user by their id/email address and force them to change their password on their next sign in? For me, this would allow the users of an application I'm building (the administration team) to create user accounts on behalf of other users (organisation-external members), with a temporary password, and force the user to change their password on sign in. Should I go about this by keeping track in a separate table referencing their ID's etc?
Love this library so much, thanks for any help!
Cheers
Contributor guide
No contributing guide indexed for this repository
Research direction
The issue names no files or tests; start by locating the library’s sign-in, user lookup, and password-change entry points. Clarify how a temporary-password state should be stored and consumed, then define tests showing that the next sign-in requires a change and subsequent sign-ins do not.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100