[SLING-3905] Support Password Expired In Sling Authenticator

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Auth Core 1.2.0
• Component/s: Authentication
• Assignee: Carsten Ziegeler
• Reporter: Dominique Jäggi
• Created: 02/Sep/14 12:51
• Updated: 02/Oct/14 07:51
• Resolved: 03/Sep/14 14:21

Description

With the added support for password expiry and password change on initial login (see OAK-1922) the sling authenticator needs to be enhanced in order to support additional login states, such as "password expired". these states can later be evaluated by login handlers, e.g. redirecting to appropriate change password locations.

the attached patch introduces an enum for login state reason codes and sets the code during handle login failure depending on the login state.

Issue Links

• is related to: SLING-3922 Login Failure Reason Code Not Propagated In AuthUtil#sendInvalid
• is related to: SLING-3991 Support Password Change Upon Expiry Via SimpleCredentials Attribute