Experimental project

This is a sandbox project, which contains experimental code for developer use only.

Description:

Once defined a user role and grouping the users in this role, the module will intercept user login and check if the user account belongs this group. If so, the reset password e-mail is sent and a warning message is showed.
This verification is done only by username or e-mail, the password will be disconsidered in this flow.

Some reasons to use Force New Password module:

  • After migrate user accounts with passwords that can't be migrated to SHA1.
  • After change your password policy.

How the flow works:

  1. The user performs a regular login into site account.
  2. The module will intercept user login and check via username (or e-mail) if the coming user needs a new password.
  3. If so, the module shows a security message and sends an e-mail given the user further information.
  4. The user receives the e-mail and click over the one-time-login link.
  5. User is redirected into edit profile form.
  6. User changes the password.

** IMPORTANT **

This module may not work properly if you have redirect actions set with Trigger module.

Project information