Password Requirements

[hpl123]

The solution Rod detailed should work (the "encryption" is subpar so not a very secure solution though) for this but here are tips about other potential solutions you can use::
http://www.awareim.com/forum/viewtopic. ... ain#p35893

http://www.awareim.com/forum/viewtopic. ... Bob#p29238

[tford]

Mark - I think you kinda just answered your own question

Why not do this:

1. On signup you set username and create a password for the user (use the Aware function to create password, make it a random long key)

2. Then using rules you build a login link, why not actually use the username and password in the link, then encrypt the link using the Aware function)

3. Email it to user

4. When they click it they are actually logging in with their user name and password (but can't see it because it's encrypted). Have a process (first command) to check first login and prompt them to enter new password.

Rod's answer will definitely work. I do something similar for an application although the purpose of my email is different.

[karelh]

Mark - I think you kinda just answered your own question

Why not do this:

1. On signup you set username and create a password for the user (use the Aware function to create password, make it a random long key)

2. Then using rules you build a login link, why not actually use the username and password in the link, then encrypt the link using the Aware function)

3. Email it to user

4. When they click it they are actually logging in with their user name and password (but can't see it because it's encrypted). Have a process (first command) to check first login and prompt them to enter new password.

Thank you very much for this information. I have it at the point where the user gets the link and he can login. I also execute a process on first logon that tells the user to change their password and it then displays the user settings BO form.

The only issue is that there is obviously a password already in the password field and the user can just hit save without changing it. I have tried setting the password to undefined but that does not seem to work. How can I clear the password attribute on the form to force them to enter a new password?

Thanks!

[4xjbh]

I would just have a yes/no that is checked if a password change is required and have it checked against the old value. I think there is a function old_value

[karelh]

I would just have a yes/no that is checked if a password change is required and have it checked against the old value. I think there is a function old_value

Thank you so much. That worked like a charm.