You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm creating a custom UserStorageProvider that is interfacing with an external system via REST APIs. The authentication itself is working great, but the challenge I'm running into now is when implementing the CredentialInputUpdater interface, as part of the updateCredential method I need access to the user's old password as part of the required parameters for the change password API on the external system because it requires I pass in both the old & the new passwords.
Is there any way to get access to that? FWIW, I'm only trying to implement this as part of the RequiredAction.UPDATE_PASSWORD flow. I don't want to just put the user's password as an attribute on the user model during login because it ends up being stored clear text in the DB. Is there any kind of secure way to temporarily persist that data in some sort of session context or something?
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
I'm creating a custom UserStorageProvider that is interfacing with an external system via REST APIs. The authentication itself is working great, but the challenge I'm running into now is when implementing the CredentialInputUpdater interface, as part of the updateCredential method I need access to the user's old password as part of the required parameters for the change password API on the external system because it requires I pass in both the old & the new passwords.
Is there any way to get access to that? FWIW, I'm only trying to implement this as part of the RequiredAction.UPDATE_PASSWORD flow. I don't want to just put the user's password as an attribute on the user model during login because it ends up being stored clear text in the DB. Is there any kind of secure way to temporarily persist that data in some sort of session context or something?
All reactions