@Override public boolean credentialsNonExpired(UserCredentials credentials) { int credentialsExpires = systemSettingManager.credentialsExpires(); if (credentialsExpires == 0) { return true; } int months = DateUtils.monthsBetween(credentials.getPasswordLastUpdated(), new Date()); return months < credentialsExpires; }