Chandrika For the fix, do not allow enabling "force-password-reset-days" unless the value is > 0. Also, If I am calling the api and passing multiple parameters (https://demo.openmf.org/api-docs/apiLive.htm#configs_globalconfig_update) , i.e both enabled and the value to greater than 0, the API call should succeed
So you would check if
a) value is also passed in the same request and is great than 0, allow enabling "force-password-reset-days" b) value is not passed, but the existing value in the database is >0, allow enabling "force-password-reset-days"
|