Use of is_password_changed

[svaabs]

In cgxp the purpose of the attribute is_password_changed was to show a message and force the user to change his password if the value was set to false. How is this done in ngeo or is there no more use of this feature?

[ger-benjamin]

It seems that this value exist in ngeo but is not used. So it looks like there is no implemented mechanism to force the user to change his password for now.

[ybolognini]

To do

[ger-benjamin]

I've added a gmf-authentication-force-password-change attribute. See #3346

[svaabs]

Thanks for working on this. I had the chance to implement it on our gmf222-branch and unhappily it does not work as expected.
When I login with a user that has is_password_changed set to false, I don't get any message (but I do expect one). As soon as the page is fully refreshed, the message appears.
Can you reproduce this on demo?

[ger-benjamin]

:-/ Sadly I can reproduce the issue, I'll fix it soon

[ger-benjamin]

Fixed with #3484