def reset_password(code):
try:
username = _check_reset_password_code(code)
except itsdangerous.SignatureExpired:
flash('Reset code expired, please get another one!', 'error')
return redirect(url_for('.reset_password_request'))
except itsdangerous.BadSignature:
flash('Could not verify reset code. Please try again!', 'error')
return redirect(url_for('.reset_password_request'))
form = ResetPasswordForm()
if form.validate_on_submit():
user = User.fetch(username)
if user:
user.password = form.password.data
db.session.commit()
flash('Password successfully reset: please log in.', 'success')
else:
flash('Username not found in our database!', 'error')
return redirect(url_for('.login'))
return render_template('user/reset_password.html', form=form)
def test_home_post(self):
"""Update user data if logged in"""
self.login()
self.cli.post(url_for('user.home_for_user', username='******'),
data={'email': '*****@*****.**'})
u = User.fetch('test')
h.assert_equal(u.email, '*****@*****.**')
def before_request():
g.debug = current_app.debug
# User from session
username = session.get('user')
g.user = User.fetch(username)
g.auth = auth.Authenticator(Consumer.fetch)
g.authorize = authz.authorize
g.after_annotation_create = _add_annotation_link
g.before_annotation_update = _add_annotation_link
def before_request():
g.debug = current_app.debug
# User from session
username = session.get('user')
g.user = User.fetch(username)
g.auth = auth.Authenticator(Consumer.fetch)
g.authorize = authz.authorize
g.after_annotation_create = _add_annotation_link
g.before_annotation_update = _add_annotation_link
def view_annotation(id, format=None):
ann = Annotation.fetch(id)
if ann is None:
return abort(404)
if g.authorize(ann, 'read', g.user):
if ann['consumer'] == 'annotateit':
user = User.fetch(ann['user'])
else:
user = None
return {'annotation': ann, 'user': user}
abort(401)
def view_annotation(id, format=None):
ann = Annotation.fetch(id)
if ann is None:
return abort(404)
if g.authorize(ann, 'read', g.user):
if ann['consumer'] == 'annotateit':
user = User.fetch(ann['user'])
else:
user = None
return {'annotation': ann, 'user': user}
abort(401)
def test_home_post(self):
"""Update user data if logged in"""
self.login()
self.cli.post(url_for('user.home_for_user', username='******'), data={'email': '*****@*****.**'})
u = User.fetch('test')
h.assert_equal(u.email, '*****@*****.**')
def _get_session_user():
username = session.get('user')
if username is None:
return None
else:
return User.fetch(username)
def _get_session_user():
username = session.get('user')
if username is None:
return None
else:
return User.fetch(username)
