Details
Description
Right now, we do the PasswordPolicy check in three parts :
- first we fetch the user from the DN in the AuthnInterceptor
- then we check the PasswordPolicy into the Authenticator
- then we update the entry in the AuthnInterceptor
I wonder if we should not do that in the Authenticator ?