Force users to change password

This commit applies the password_expiration setting to all users.
Users won't be able to do anything other than update password until it's done.
This commit is contained in:
2021-01-06 05:03:38 +00:00
parent aa2bfac3e5
commit 14a8e9e9d5
8 changed files with 178 additions and 38 deletions

View File

@@ -100,8 +100,7 @@
<p><b><i class="fas fa-exclamation-triangle"></i> DANGER: </b> Insecure security policy</p>
<p>Your current password security policy is set to <b>off</b>. This allows users to choose potentially unsafe passwords.</p>
<p>We strongly recommend you update this value to <b>Low</b> or <b>Medium</b>.</p>
<p>Your current password security policy is set to <b>off</b>. This allows users to choose potentially unsafe passwords. We strongly recommend you update this value to <b>Medium</b>.</p>
</div>

View File

@@ -205,6 +205,23 @@
</div>
@if(session('passwordExpired'))
<div class="row">
<div class="col">
<div class="alert alert-warning">
<p><i class="fas fa-exclamation-triangle"></i><b> Your password has expired</b></p>
<p>
You've been redirected here because your <b>password has expired.</b> All users must change their password every {{ \App\Facades\Options::getOption('password_expiry') }} days.
This is put in place to make sure user accounts remain secure.
</p>
<p>Please change update your password now. You won't be able to use the application until you do this.</p>
</div>
</div>
</div>
@endif
<div class="row">
<div class="col">