Change Password on first use does not work properly.

Question

I have created apex application user in Oracle Apex 3.2 as follows
BEGIN
APEX_UTIL.CREATE_USER(
p_user_name => 'NEWUSER1',
p_web_password => 'secret99');
END;
As in the documentation
p_change_password_on_first_use  IN      VARCHAR2    DEFAULT 'Y',
User should be prompted to change password at first use. But it does not work properly. There is no such message. Still accepts user to log in with old passord that was first given to the user. I have tried explicitly to ensure change password at first log in. by
BEGIN
APEX_UTIL.CREATE_USER(
p_user_name => 'NEWUSER1',
p_web_password => 'secret99',
p_change_password_on_first_use =>'Y');
END;
Still does not work. How can I ensure user to change password on first login.
Hasan Al Mamun
Programmer
Bangladesh Bank
Dhaka, Bangladesh

Answer 1

Might be a long way around the problem but I would utilize a boolean flag in a column (FIRST_LOGIN) your custom auth table set to 'Y' when you create their account. Then on the login page have a page process something like:
** NOT TESTED **
declare
v_first VARCHAR2(10;
v_session NUMBER;
begin
v_session := APEX_CUSTOM_AUTH.GET_NEXT_SESSION_ID;
select FIRST_LOGIN into v_first from AUTH_TABLE where user_name = :P101_USERNAME and :P101_PASSWORD;
if v_first = 'Y' then
wwv_flow_custom_auth_std.login(
P_UNAME => :P101_USERNAME,
P_PASSWORD => :P101_PASSWORD,
P_SESSION_ID => v_session,
P_FLOW_PAGE => :APP_ID||':2' *** THIS IS YOUR PAGE TO HAVE THEM RESET THEIR PASSWORD ***
else
wwv_flow_custom_auth_std.login(
P_UNAME => :P101_USERNAME,
P_PASSWORD => :P101_PASSWORD,
P_SESSION_ID => v_session,
P_FLOW_PAGE => :APP_ID||':1' *** MAIN LOGIN PAGE *****
EXCEPTION WHEN OTHERS THEN
*** handled **
end;
The page 2 in this example would have an few items for them to enter their new password twice, a page process to update their password in the auth table and then redirect them to the intended first page.
Not sure if it meets your setup.
Ricker