BA-1424-fe-refactor-password-expiration-flow-library #96
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Acceptance Criteria
superuser can config password expiration interval (default - 2 years - a long time on purpose) in the admin
superuser with MFA enabled can press a button to force all users to reset pw (if no MFA, show error)
on manual or automatic reset, send an email to active users informing them their password has expired, and to reset their password + link to password reset flow.
this page will be very similar to the forgot/reset password routes on the frontend, but requires old password to be confirmed
subject: [App Name] Password Expired - Reset Now
body: Your password has expired, please reset your password by following this link: