Ejemplo n.º 1
0
    def get(self):
        show_code = self.get_argument("code", default=None)
        reset_token = self.get_argument("t", default=None)

        if config.level2_showcode and show_code:
            with open(__file__) as code:
                content = code.read()
                self.write("<pre>" + xhtml_escape(content) + "</pre>")
        elif reset_token:
            mail, signature = get_token_components(reset_token)
            if not validate_token(reset_token):
                self.render("templates/error.html", message="Invalid data.")
            elif mail == config.admin_email:
                base_url = utils.get_cosmetic_url(self.request)
                self.render("templates/success.html",
                    message=config.level2_message,
                    next_challenge=base_url + config.level3_link
                )
            else:
                self.render("templates/error.html",
                            message="HoHo! You did trigger the password reset "
                                    "function, but for the wrong user.")
        else:
            self.render("templates/level.html", level="Level 2",
                        show_code=config.level2_showcode)
Ejemplo n.º 2
0
    def get(self):
        show_code = self.get_argument("code", default=None)
        reset_token = self.get_argument("t", default=None)

        if config.level3_showcode and show_code:
            with open(__file__) as code:
                content = code.read()
                self.write("<pre>" + xhtml_escape(content) + "</pre>")
        elif reset_token:
            mail, signature = get_token_components(reset_token)
            if signature and not validate_token(reset_token):
                self.render("templates/error.html", message="Invalid data.")
            elif mail == config.admin_email:
                base_url = utils.get_cosmetic_url(self.request)
                self.render("templates/success.html",
                            message=config.level3_message,
                            next_challenge=base_url + config.level4_link)
            else:
                self.render("templates/error.html",
                            message="HoHo! You did trigger the password reset "
                            "function, but for the wrong user.")
        else:
            self.render("templates/level.html",
                        level="Level 3",
                        show_code=config.level3_showcode)
Ejemplo n.º 3
0
 def post(self):
     email = self.get_argument("email", default=None)
     if not email:
         self.send_error(400)
     elif email == config.admin_email:
         self.render("templates/error.html", message="Nice try ;)")
     else:
         reset_token = create_token(email)
         base_url = utils.get_cosmetic_url(self.request)
         reset_link = base_url + config.level2_link + "?t=" + reset_token
         self.render("templates/resetlink.html", resetlink=reset_link)
Ejemplo n.º 4
0
 def post(self):
     email = self.get_argument("email", default=None)
     if not email:
         self.send_error(400)
     elif email == config.admin_email:
         self.render("templates/error.html", message="Nice try ;)")
     else:
         reset_token = create_token(email)
         base_url = utils.get_cosmetic_url(self.request)
         reset_link = base_url + config.level3_link + "?t=" + reset_token
         self.render("templates/resetlink.html", resetlink=reset_link)
Ejemplo n.º 5
0
 def post(self):
     email = self.get_argument("email", default=None)
     if not email:
         self.send_error(400)
     elif email == config.admin_email:
         reset_token = create_token()
         save_token(email, reset_token)
         self.render("templates/error.html",
                     message="The reset link has been sent to the "
                             "admin's email.")
     else:
         reset_token = create_token()
         save_token(email, reset_token)
         base_url = utils.get_cosmetic_url(self.request)
         reset_link = base_url + config.level4_link + "?t=" + reset_token
         self.render("templates/resetlink.html", resetlink=reset_link)