fix: redirect to password_change only when the password expired

alexandriagroup · Jan 19, 2024 · 3d0e0db · 3d0e0db
1 parent b29e3e0
commit 3d0e0db
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/password_rotate/signals.py b/password_rotate/signals.py
@@ -9,10 +9,12 @@
 
 
 def redirect_to_change_password(sender, request, user, **kwargs):
-    messages.error(request, "Password must be changed.")
-    # set flag for middleware to pick up
-    request.redirect_to_password_change = True
-    print("set")
+    checker = PasswordChecker(request.user)
+    if checker.is_expired():
+        messages.error(request, "Password must be changed.")
+        # set flag for middleware to pick up
+        request.redirect_to_password_change = True
+        print("set")
 
 
 def create_user_handler(sender, instance, created, **kwargs):