APEX

We have recently implemented a list of passwords that users are not allowed to use. Basic stuff like 1234, abcd etc.

I currently use a custom authentication, so i can quite easily stop a user from changing their password to a dissallowed one. But my issue is that i want to force current users to changer their current password if it breaks the new rules.

I think that i should allow them to authenticate themselves using their current password, and then do a check to see if they should be branched to a specific screen to change their password.

Basically i want to do a conditional branch after authentication.

anybody implemented something similar? or anyone have any ideas?