Password rotation

8961f60effc7-password-rotation.ex

defmodule MyAppWeb.Router do
  use Phoenix.Router

  ....
  pipeline "auth" do
    # Where we set :current_user
    plug :require_authenticated_user
    # Check password validity
    plug MyApp.PasswordRotation
  end
end

defmodule MyApp.PasswordRotation do
  @expires_in 60

  def init(opts), do: opts

  def call(conn, _) do
    current_user = conn.assigns[:current_user]

    if Date.add(current_user.password_updated_at, @expires_in) < Date.utc_today() do
      conn
      |> Phoenix.Controller.put_flash("info", "Please update your password!")
      |> Phoenix.Controller.redirect("/update-password")
      |> Plug.Conn.halt()
    else
      conn
    end
  end
end