def login_email_passreset(code): """ They've clicked on a password reset link. Log them in (might as well) and send them to the password reset page.""" # This will also confirm their email if they haven't. # Doesn't seem to be any harm in doing that if len(code) > 20: abort(404) uid = Users.verify_confirm_code(code) if not uid: abort(404) Users.set_confirm(uid) Users.set_confirm_code(uid, "") user = Users2.get_user(uid) session['username'] = user['uname'] session['user_id'] = uid session['user_givenname'] = user['givenname'] session['user_familyname'] = user['familyname'] session['user_fullname'] = user['fullname'] session['user_authtype'] = "local" audit(1, uid, uid, "UserAuth", "%s logged in using password reset email" % (session['username'], )) flash("Please change your password") return redirect(url_for("setup_change_pass"))
def login_email_passreset(code): """ They've clicked on a password reset link. Log them in (might as well) and send them to the password reset page.""" # This will also confirm their email if they haven't. # Doesn't seem to be any harm in doing that if len(code) > 20: abort(404) uid = Users.verify_confirm_code(code) if not uid: abort(404) Users.set_confirm(uid) Users.set_confirm_code(uid, "") user = Users2.get_user(uid) session['username'] = user['uname'] session['user_id'] = uid session['user_givenname'] = user['givenname'] session['user_familyname'] = user['familyname'] session['user_fullname'] = user['fullname'] session['user_authtype'] = "local" audit(1, uid, uid, "UserAuth", "%s logged in using password reset email" % (session['username'],)) flash("Please change your password") return redirect(url_for("setup_change_pass"))
def login_confirm(code): """ They've clicked on a confirmation link.""" if not OaConfig.open_registration: abort(404) if len(code) > 20: abort(404) uid = Users.verify_confirm_code(code) if not uid: abort(404) Users.set_confirm(uid) Users.set_confirm_code(uid, "") return render_template("login_signup_confirmed.html")