[SLING-3991] Support Password Change Upon Expiry Via SimpleCredentials Attribute

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: JCR Resource 2.3.10, Auth Core 1.3.2, API 2.9.0
• Component/s: Authentication
• Assignee: Antonio Sanso
• Reporter: Dominique Jäggi
• Created: 02/Oct/14 07:51
• Updated: 07/Oct/15 13:51
• Resolved: 09/Oct/14 19:29

Description

based on OAK-2156 sling should support changing passwords in the context of an expired password, this by passing any present "new password" POST parameter as a SimpleCredentials attribute to the repository (#login).

this change can be implemented without dependency on OAK changes, as the SimpleCredentials already support attributes and those attributes are already filled with key/values obtained from the authInfo.

a patch will be provided later.

Issue Links

• is related to: SLING-5116 Communicate Password Change Failure Reason During Password Expiry
• relates to: SLING-3922 Login Failure Reason Code Not Propagated In AuthUtil#sendInvalid
• relates to: SLING-3905 Support Password Expired In Sling Authenticator
• relates to: OAK-2156 UserAuthentication: Allow Password Change Via SimpleCredentials Attribute