Intercepting j_username, j_password for server side password validations
Hi,
My use case is such that I need to allow users to login (authenticated via j_security) , post which I need to identify if passwords are weak and make users change them.
Is there any API that allows decrypted user password to be fetched from JCR ? Or any other idea how this can be achieved.