Notify user before password expiration

[mlazzarotto]

Taking cue from this discussion: https://help.nextcloud.com/t/email-notification-for-password-expiration/148416/
A nice enhancement I'd like to see in Nextcloud is a notification to users whom password is going to expire in x days.
The notifications could be either emails or push notifications (or both?).

Ideally, there should be a toggle in the administrative settings and possibly a text box to choose how many days to send e-mails/notifications to users before the deadline.

[rockmv]

Notify user before password expiration is a very important feature if you work without an LDAP connection and need to automatically notify users when their password expires or has already expired. Would it be possible to implement that?

[R0Z-Z]

Headache... Especially many first user's accounts had been created at the same day. A day scale randomization parameter can also be added besides "Number of days until user password expires" field so that password change requests get diffused over a period of few days.

[R0Z-Z]

I'd like to add another inconvenience note about password expiry. These are simple details that cost admin time. When password expires, user is left alone with a note with no subsequent reset password link. Since their credentials are cached in their browser, they cannot return to login page, continuing in a password expired loop. The only way is to clear site cookies, where they come to admin asking what to do. Please consider fixing this behaviour too. Thanks.

[Irdiism]

This is indeed a pretty important feature. Any plans on this?

[urfin73]

I join the requests. A very useful function is the notification of password expiration. In this notification you can also send a link to change the password. And yes, if it has already expired, on the page with the message about it, you can also provide a link.

[J-Doc-Hugues]

Thank you @mlazzarotto to have opened this issue
I have dozens of users who are bothered by the two problems reported here:

1. The inability of users whose password has expired to reset it Since their credentials are cached in their browser, they cannot return to login page, continuing in a password expired loop.
   A very simple solution should be to add the reset password link on the Error screen ‘ expired password ’ .

2. users are surprised to discover pw expiration because they did not reveived any email notification about it.
   The solution is more cumbersome : add a parameter for the number of days to notify users of future password expiry, Add the automatic sending of notification emails with the reset password link .

These two drawbacks mean that the important password expiry function is not sexy at all with Nextcloud.
I'm delighted to see @joshtrichards knows this issue.

I suggest @mlazzarotto to change the current title to improve importance
of the issue « Make password expiration operational : email notification + reset password link »
And then propose to developpers to handle this issue with 2 actions :
1/ Add the reset password link on the Error screen ‘ expired password ’ .
2/ Make an new function «notification of futur password expiration »