Open
Description
When a user's password is expired, they're prompted to change it.
However, when attempting to do so they receive an error: "something bad happened. Please contact site admin"
The logs show either:
"Failed to change expired password for user" err="password does not conform to policy"
but it does.
or:
"Failed to change expired password for user" err="invalid current password"
However the user was just authenticated using these credentials which initiated the password change process.
Metadata
Metadata
Assignees
Labels
No labels