Class InsecurePasswordResetInterceptor

  • All Implemented Interfaces:
    org.springframework.web.servlet.AsyncHandlerInterceptor, org.springframework.web.servlet.HandlerInterceptor

    public class InsecurePasswordResetInterceptor
    extends SkippableInterceptor
    Interceptor class for handling insecure password reset requests.

    The interceptor responses with a redirect to /changePassword.html if the request session is marked with RESET_INSECURE_PASSWORD_REQUIRED_ATTRIBUTE attribute. This attribute is set in WebLoginModelImpl when log in request is processed and the PasswordComplexityChecker validation fails.