[PROPOSAL] Users being removed from suspension have randomly generated password created

[devotedsouls]

Is your feature request related to a problem? Please describe.
This feature request has been created to separate Issue 394 into separate proposals.

Describe the solution you'd like
The base of this proposal is that upon the end user being unsuspended, their account password should be reset to a randomly generated password and required upon login to have a reset be forced.
Describe alternatives you've considered
N/A
Additional context
This would require an email to be sent to the user upon suspension deprecation. A reset link would be sent and not a plain text password.

[ItsAGeekThing]

If this was to be implemented it should be optional. We could add a checkbox as part of the unsuspension flow if the password should be reset.

The only real concern I have is the idea of sending a password (regardless if it is random or not) via email in plain text. It's bad practice. Instead we could make it when the unsuspended user goes to login they get a error message saying they need to reset there password to login. We would need to implement a password reset flow to implement this.

[phillf]

@ItsAGeekThing, My thought process with this is when the user is unsuspended the application would automatically send a password reset link and not a plain text password.

I would never advocate the transmission of password in clear text like that.

[Cambridgeport90]

Same over here… besides, password links are much more common. I can’t remember the last time I had a temp password sent.