java - Custom authorization depending on user property -
in application, after user has been logged first time, has change default password. process have changepassword.xhtml
page can change password. restrict access page , redirect him changepassword.xhtml
until has changed default password. user class has firsttime
property have register if first time logged or not.
can manage in config class?
i think have add user_need_change_password_role
role user , give him access password change page. need stored in base of flag of password change , implement authentication-success-handler-ref = "my_handler"
.
when user has held first authorization, check status of flag. if flag requires password change redirect password change page. after changing password redirect him login page.
Comments
Post a Comment