Feature - Rule-based password expiry

[PasinduYeshan]

Proposed changes in this pull request

• Updated the getConnectorListWithConfigs method to include properties whose names start with the connector name, even if there is no explicit mapping in the connector.
• Added a new configuration passwordExpiry.skipIfNoApplicableRules to change the fallback behavior of rule-based password expiry. This configuration allows admin to choose whether to skip password expiration or apply the default password expiry days to all users if no specific rules are applicable.
• Introduce rule-based password expiration.
  • Rule format: {priority},{expiryDays},{attribute},{operator},{comma separated values}

Sample Response:

{
        "id": "cGFzc3dvcmRFeHBpcnk",
        "name": "passwordExpiry",
        "category": "Password Policies",
        "friendlyName": "Password Expiry",
        "order": 0,
        "subCategory": "DEFAULT",
        "properties": [
            {
                "name": "passwordExpiry.rule1",
                "value": "1,0,groups,ne,9180e57a-ebf3-4594-b8bd-c8212c12d14f,75a823ae-a82c-428d-a068-7e17a08c720e",
                "description": "",
                "meta": {
                    "groupID": 0
                }
            },
            {
                "name": "passwordExpiry.rule2",
                "value": "3,40,roles,eq,12ec01e1-31e5-4a7d-aa45-8a485d10c8fa,cc40ad49-efdc-454b-8435-75fa1b627332",
                "description": "",
                "meta": {
                    "groupID": 0
                }
            },
            {
                "name": "passwordExpiry.skipIfNoApplicableRules",
                "value": "false",
                "displayName": "Skip password expiry if no applicable rules",
                "description": "Skip password expiry if no applicable rules are found for the user",
                "meta": {
                    "groupID": 0
                }
            },
            {
                "name": "passwordExpiry.passwordExpiryInDays",
                "value": "25",
                "displayName": "Password Expiry In Days",
                "description": "Number of days after which the password will expire",
                "meta": {
                    "groupID": 0
                }
            },
            {
                "name": "passwordExpiry.enablePasswordExpiry",
                "value": "true",
                "displayName": "Enable Password Expiry",
                "description": "Allow users to reset the password after configured number of days",
                "meta": {
                    "groupID": 0
                }
            }
        ]
    }

Related Issues

• Support rule-based password expiration wso2/product-is#20771

[jenkins-is-staging]

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/10385422505

[PasinduYeshan]

Issue mentioned in wso2/product-is#20865 is also addressed by this fix.

[jenkins-is-staging]

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/10385422505
Status: failure

[jenkins-is-staging]

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/10399393829

[jenkins-is-staging]

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/10399394438

[jenkins-is-staging]

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/10399394438
Status: cancelled

[jenkins-is-staging]

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/10399393829
Status: success

[jenkins-is-staging]

Approving the pull request based on the successful pr build https://github.com/wso2/product-is/actions/runs/10399393829