def changepassword(self, email, oldpassword, newpassword):
Validator.email(email)
Validator.password(newpassword)
if self.user.get(email)['password'] != Secret.hash(oldpassword, SALT):
raise RiverException(_('The old password is incorrect for this user.'))
self.user.update(email, password=Secret.hash(newpassword, SALT))
def usersites(self, email, session_id):
Validator.email(email)
Validator.session(session_id)
user = self.user.get(email)
self.user.validate_session(user['session'], session_id)
return self.site.get_user_urls(user['id'])
def changepassword(self, email, oldpassword, newpassword):
Validator.email(email)
Validator.password(oldpassword)
Validator.password(newpassword)
if self.user.get(email)['password'] != Secret.hash(oldpassword, SALT):
raise RiverException(
_('The old password is incorrect for this user.'))
self.user.update(email, password=Secret.hash(newpassword, SALT))
def register(self, email, password):
Validator.email(email)
Validator.password(password)
if self.user.exists(email):
raise RiverException(_('The given email address has already been registered.'))
user_id = Secret.generate(128)
self.user.insert(email, enabled=True, id=user_id, password=Secret.hash(password, SALT))
return user_id
def confirmemail(self, email, token):
Validator.email(email)
Validator.token(token)
user = self.user.get(email)
if not user['token']:
raise RiverException('This email address has already been confirmed.')
if user['token'] != token:
raise RiverException('The token is not valid for this email address.')
self.user.update(email, enabled=True, token=False)
def changeemail(self, oldemail, newemail, password):
Validator.email(oldemail)
Validator.email(newemail)
Validator.password(password)
if self.user.get(oldemail)['password'] != Secret.hash(password, SALT):
raise RiverException('The password is incorrect for this user.')
token = Secret.generate(16)
self.user.update(oldemail, email=newemail, enabled=False, token=token)
Mail.send(MAIL_FROM, newemail, 'RiverID Email Change', token)
def requestpassword(self, email, mailbody):
Validator.email(email)
token = Secret.generate(16)
if self.user.exists(email):
subject = _('RiverID: Please confirm your password change.')
self.user.update(email, token=token)
else:
subject = _('RiverID: Please confirm your email address.')
user_id = Secret.generate(128)
self.user.insert(email, id=user_id, enabled=False, token=token)
Mail.send(MAIL_FROM, email, subject, mailbody, token=token)
def setpassword(self, email, token, password):
Validator.email(email)
Validator.token(token)
Validator.password(password)
user = self.user.get(email)
if not user['token']:
raise RiverException('No password change has been requested for this email address.')
if user['token'] != token:
raise RiverException('The token is not valid for this email address.')
self.user.update(email, enabled=True, token=False, password=Secret.hash(password, SALT))
def requestpassword(self, email):
Validator.email(email)
token = Secret.generate(16)
if self.user.exists(email):
subject = 'RiverID: Please confirm your password change.'
self.user.update(email, token=token)
else:
subject = 'RiverID: Please confirm your email address.'
user_id = Secret.generate(128)
self.user.insert(email, id=user_id, enabled=False, token=token)
Mail.send(MAIL_FROM, email, subject, token)
def sessions(self, email, session_id):
Validator.email(email)
Validator.session(session_id)
sessions = self.user.get(email)['session']
found = False
for session in sessions:
if session['id'] == session_id and 'stop' not in session:
found = True
if not found:
raise RiverException('The session is not valid for this account.')
return sessions
def confirmemail(self, email, token):
Validator.email(email)
Validator.token(token)
user = self.user.get(email)
if not user['token']:
raise RiverException(
_('This email address has already been confirmed.'))
if user['token'] != token:
raise RiverException(
_('The token is not valid for this email address.'))
self.user.update(email, enabled=True, token=False)
def addusertosite(self, email, session_id, url):
Validator.email(email)
Validator.session(session_id)
Validator.url(url)
user = self.user.get(email)
self.user.validate_session(user['session'], session_id)
if not self.site.exists(url):
self.site.add_site(url)
if url in self.site.get_user_urls(user['id']):
raise RiverException(_('The site has already been added to this user.'))
self.site.add_user(url, user['id'])
def register(self, email, password):
Validator.email(email)
Validator.password(password)
if self.user.exists(email):
raise RiverException(
_('The given email address has already been registered.'))
user_id = Secret.generate(128)
self.user.insert(email,
enabled=True,
id=user_id,
password=Secret.hash(password, SALT))
return user_id
def sessions(self, email, session_id):
Validator.email(email)
Validator.session(session_id)
sessions = self.user.get(email)['session']
found = False
for session in sessions:
if session['id'] == session_id and 'stop' not in session:
found = True
if not found:
raise RiverException(
_('The session is not valid for this account.'))
return sessions
def changeemail(self, oldemail, newemail, password, mailbody):
Validator.email(oldemail)
Validator.email(newemail)
Validator.password(password)
if self.user.get(oldemail)['password'] != Secret.hash(password, SALT):
raise RiverException(_('The password is incorrect for this user.'))
token = Secret.generate(16)
self.user.update(oldemail, email=newemail, enabled=False, token=token)
Mail.send(MAIL_FROM,
newemail,
_('RiverID Email Change'),
mailbody,
token=token)
def signin(self, email, password):
Validator.email(email)
Validator.password(password)
user = self.user.get(email)
if user['enabled'] == False:
raise RiverException('The account is disabled.')
if user['password'] != Secret.hash(password, SALT):
raise RiverException('The password is incorrect for this user.')
session_id = Secret.generate(64)
session_start = datetime.utcnow().isoformat()
self.user.add(email, 'session', id=session_id, start=session_start)
return dict(user_id=user['id'], session_id=session_id)
def signin(self, email, password):
Validator.email(email)
Validator.password(password)
user = self.user.get(email)
if user['enabled'] == False:
raise RiverException(_('The account is disabled.'))
if user['password'] != Secret.hash(password, SALT):
raise RiverException(_('The password is incorrect for this user.'))
session_id = Secret.generate(64)
session_start = datetime.utcnow().isoformat()
self.user.add(email, 'session', id=session_id, start=session_start)
return dict(user_id=user['id'], session_id=session_id)
def signout(self, email, session_id):
Validator.email(email)
Validator.session(session_id)
sessions = self.user.get(email)['session']
found = False
for count, session in enumerate(sessions):
if session['id'] == session_id:
if 'stop' in session:
raise RiverException('The session has already been ended.')
found = True
session_stop = datetime.utcnow().isoformat()
self.user.update_array(email, 'session', count, 'stop', session_stop)
if not found:
raise RiverException('The session is not valid for this account.')
def requestpassword(self, email, mailbody, mailfrom = None, mailsubject = None):
Validator.email(email)
token = Secret.generate(16)
if mailfrom is None:
mailfrom = MAIL_FROM
if self.user.exists(email):
if mailsubject is None:
mailsubject = _('CrowdmapID: Please confirm your password change.')
self.user.update(email, token=token)
else:
if mailsubject is None:
mailsubject = _('CrowdmapID: Please confirm your email address.')
user_id = Secret.generate(128)
self.user.insert(email, id=user_id, enabled=False, token=token)
Mail.send(mailfrom, email, mailsubject, mailbody, token=token)
def setpassword(self, email, token, password):
Validator.email(email)
Validator.token(token)
Validator.password(password)
user = self.user.get(email)
if not user['token']:
raise RiverException(
_('No password change has been requested for this email address.'
))
if user['token'] != token:
raise RiverException(
_('The token is not valid for this email address.'))
self.user.update(email,
enabled=True,
token=False,
password=Secret.hash(password, SALT))
def signout(self, email, session_id):
Validator.email(email)
Validator.session(session_id)
sessions = self.user.get(email)['session']
found = False
for count, session in enumerate(sessions):
if session['id'] == session_id:
if 'stop' in session:
raise RiverException(
_('The session has already been ended.'))
found = True
session_stop = datetime.utcnow().isoformat()
self.user.update_array(email, 'session', count, 'stop',
session_stop)
if not found:
raise RiverException(
_('The session is not valid for this account.'))
def changeemail(self, oldemail, newemail, password, mailbody, mailfrom = None, mailsubject = None):
Validator.email(oldemail)
Validator.email(newemail)
Validator.password(password)
if self.user.get(oldemail)['password'] != Secret.hash(password, SALT):
raise RiverException(_('The password is incorrect for this user.'))
if self.user.exists(newemail):
raise RiverException(_('The new email address has already been registered.'))
if mailsubject is None:
mailsubject = _('CrowdmapID Email Change')
if mailfrom is None:
mailfrom = MAIL_FROM
token = Secret.generate(16)
self.user.update(oldemail, email=newemail, enabled=False, token=token)
Mail.send(mailfrom, newemail, mailsubject, mailbody, token=token)
def checkpassword(self, email, password):
Validator.email(email)
Validator.password(password)
return self.user.get(email)['password'] == Secret.hash(password, SALT)
def registered(self, email):
Validator.email(email)
return self.user.exists(email)
def checkpassword(self, email, password):
Validator.email(email)
Validator.password(password)
return self.user.get(email)['password'] == Secret.hash(password, SALT)
def registered(self, email):
Validator.email(email)
return self.user.exists(email)
