option to require user to change password

I have written an API allowing an administrator to reset a user's password to a randomly generated string which is sent to the user via an email. This is all working fine right now, but the customer would like to add a requirement that the user must change the password the first time he/she logs in using the newly generate string. I don't see any API functions that address this. Is there some way to require a user to change the password?

Thanks,

Stephanie

Parents
  • As far as I know, this isn't an available option in the API. But you could probably accomplish this by having your admin password reset function write something to a custom table to keep track of who needs to do a reset. Set up a your own hook function onAAHOOK_LOGIN that checks that table. If the table has that user flagged as requiring a new password, prompt the user to change it with your own dialog. Then update their password, and update your custom table. I think a post hook would likely be best in this scenario.

    Answer Verified By: Stephanie Doherty 

Reply
  • As far as I know, this isn't an available option in the API. But you could probably accomplish this by having your admin password reset function write something to a custom table to keep track of who needs to do a reset. Set up a your own hook function onAAHOOK_LOGIN that checks that table. If the table has that user flagged as requiring a new password, prompt the user to change it with your own dialog. Then update their password, and update your custom table. I think a post hook would likely be best in this scenario.

    Answer Verified By: Stephanie Doherty 

Children