Conditional branch, after authentication

Question

We have recently implemented a list of passwords that users are not allowed to use. Basic stuff like 1234, abcd etc.
I currently use a custom authentication, so i can quite easily stop a user from changing their password to a dissallowed one. But my issue is that i want to force current users to changer their current password if it breaks the new rules.
I think that i should allow them to authenticate themselves using their current password, and then do a check to see if they should be branched to a specific screen to change their password.
Basically i want to do a conditional branch after authentication.
anybody implemented something similar? or anyone have any ideas?

Answer 1

Create an application process - On Load: Before Header ....
using a similar PL/SQL block like in my case:
BEGIN
   IF NOT custom_authentication_pkg.password_valid (:app_user)
   THEN
      HTMLDB_APPLICATION.g_unrecoverable_error := TRUE;
      OWA_UTIL.redirect_url
                           ('f?p=&APP_ID.:102:&APP_SESSION.:PASSWORD_INVALID');
   END IF;
END;and make this process conditional so it doesn't fire if the current page is in
101 - login page
102 - page for changing passwords
Denes Kubicek
http://deneskubicek.blogspot.com/
http://www.opal-consulting.de/training
http://apex.oracle.com/pls/otn/f?p=31517:1
------------------------------------------------------------------------------