def GET(self, form=None): i = web.input() if check_secret_token(i.get('email', ''), i.get('token', '')): form = form or forms.passwordform() return render.set_password(form, i.email) else: helpers.set_msg('Invalid token', msg_type='error') raise web.seeother('/u/forgot_password', absolute=True)
def GET(self, form=None): i = web.input() email = i.get('email', '') email_exists = bool(helpers.get_user_by_email(email)) if email_exists and check_secret_token(email, i.get('token', '@')): form = form or forms.passwordform() return render.set_password(form, i.email) else: if email_exists: msg = 'Invalid token' else: msg = 'No user account exists with this email' helpers.set_msg(msg, msg_type='error') raise web.seeother('/u/forgot_password', absolute=True)