reset 2fa if user reset password

Author: eisbilir

src/main/java/com/appirio/tech/core/service/identity/dao/UserDAO.java

@@ -156,7 +156,7 @@ public abstract class UserDAO implements DaoBase<User>, Transactional<UserDAO> {
 
     @SqlUpdate(
             "UPDATE common_oltp.user_2fa SET " +
-            "enabled=:enabled " +
+            "enabled=:enabled, " +
             "verified=:verified " +
             "WHERE id=:id")
     public abstract int update2fa(@Bind("id") long id, @Bind("enabled") boolean enabled, @Bind("verified") boolean verified);

src/main/java/com/appirio/tech/core/service/identity/resource/UserResource.java

@@ -897,6 +897,7 @@ public ApiResponse changePassword(
 
       logger.debug(String.format("Auth0: updating password for user: %s", dbUser.getHandle()));
       userDao.updatePassword(dbUser);
+      userDao.update2fa(Utils.toLongValue(dbUser.getId()), false, false);
 
       return ApiResponseFactory.createResponse("password updated successfully.");
    }