Reputation: 559
I have a mobile app that uses firebase's mail/password authentication.
The accounts are created by someone with a "manager" profile and distributed to all their employees. The accounts use their personal corporative mails and the first password is the employee ID. For security reasons, I want to force the employees to change their password the first time they log in and then once every 30 days. Is there any way to implement this using firebase's API? Sort of like defining an expire date. Or do I have to manually do the checks keeping track of the last time the password was changed?
Upvotes: 2
Views: 222
Reputation: 317808
There is no configuration that you can set that will force password changes.
You will have to somehow force this on your own by writing application code to keep track of the last time it was successfully changed, and disallowing use of your app if it wasn't change within some threshold of time.
Upvotes: 3