HipChat Server: 'Require password reset on next sign-in' locks user out of account if they were synchronised over from external directory.

Summary

Directory users are locked out and unable to login successfully if 'Require password reset on next sign-in' has been set by Admin in the user profile.

Environment

• HipChat Server 1.3.7 (older server version is affected by the bug too)

Steps to Reproduce

1. Synchronise users over to HipChat from external directory.
2. Go into the Server admin > Users > find the user and click on their name.
3. Select the option 'Require password reset on next sign-in'
4. If that user requires to log in, an error will kick back and prevent them from logging in.

Expected Results

Directory user can login successfully

Actual Results

Directory user unable to login successfully

Notes

It seems that whenever 'Require password reset on next sign-in' option is checked, it adds the following to the users metadata in the database:

{"require_pw_reset": true}

Workaround

Run this command to update the metadata value in the database:

UPDATE users SET metadata = NULL WHERE id = <id>;