Check password requirements on login

[mgaffigan]

Changing password requirements does not affect current users. This PR modifies the login process to check requirements and handle them the same as password expiration, using the existing grace period functionality.

Note: command does not seem to handle expired passwords well.

Note to reviewers: Most of this change-set is whitespace changes due to indentation. See https://github.com/OpenIntegrationEngine/engine/pull/427/changes?w=1

[github-actions]

Test Results

675 tests  ±0   675 ✅ ±0   2m 1s ⏱️ + 1m 7s
114 suites ±0     0 💤 ±0 
114 files   ±0     0 ❌ ±0 

Results for commit 0cf7b7f. ± Comparison against base commit 423df18.

[pacmano1]

What does this do when I try to grab a token to make API calls? If it denies the token, we need to work through that.

[mgaffigan]

@pacmano1

What does this do when I try to grab a token to make API calls? If it denies the token, we need to work through that.

Nothing in the above limits logins, it just returns the flag that the password needs to be changed in the response to the login. Exactly the same as an "expired" password.

[gibson9583]

@pacmano1

What does this do when I try to grab a token to make API calls? If it denies the token, we need to work through that.

Nothing in the above limits logins, it just returns the flag that the password needs to be changed in the response to the login. Exactly the same as an "expired" password.

@mgaffigan are you sure? wont this affect a few things:

1. CLI - anything that isnt a plain SUCCESS gets a cant log into server.
2. grace period - with a >0 grace period or a -1 grace period, it can cause lockouts (but that may be OK, but contradicts your statement)