[keycloak-user] expiration for temporary password

pavel.kokush pavel.kokush at gmail.com
Fri Jun 14 04:48:22 EDT 2019


Hi

Is it possible to set expiration for temporary password?

Use case:
User ask for reset password, system do call
org.keycloak.admin.client.resource.UserResource.resetPassword method with
temporary=true flag in model.
System provide new temporary password to use (by email or something).
When user try to change this temporal password, then keycloak UserResource.
resetPassword should fail if temporary password expired (and then user must
repeat flow).
Of course temporary and normal password should have different expiration
period.

Is it possible in keycloak? If not, then any hint on how to do it with
keycloak extension (without forking keycloak) ?

Thanks,
Pavel


More information about the keycloak-user mailing list