Handle expired password different from disabled account (#6)

* Handle expired password different from disabled account

* Bump version

Author: treydock

authz-authenticator.js

@@ -24,7 +24,10 @@ function authenticate(context) {
     /*
       All other clients will authorize if the user account is not disabled or locked
     */
-    if (user.getFirstAttribute("nsAccountLock") == "TRUE" || user.getFirstAttribute("loginDisabled") == "TRUE") {
+    if (user.getFirstAttribute("nsAccountLock") == "TRUE") {
+      context.failure(AuthenticationFlowError.CREDENTIAL_SETUP_REQUIRED);
+      return;
+    } else if (user.getFirstAttribute("loginDisabled") == "TRUE") {
       context.failure(AuthenticationFlowError.USER_DISABLED);
       return;
     }

pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>edu.osc</groupId>
     <artifactId>osc-keycloak-scripts</artifactId>
-    <version>1.4.1</version>
+    <version>1.4.2</version>
     <packaging>jar</packaging>
 
     <properties>