def validate_email(request, uid, token):
user = validate_signed_token(uid, token)
if user is None:
return HttpResponseForbidden()
user.email_verified = True
user.save()
return redirect(reverse('mhacks-login') + '?username=' + user.email)
def validate_email(request, uid, token):
user = validate_signed_token(uid, token)
if user is None:
return HttpResponseForbidden()
user.email_verified = True
user.save()
return redirect(reverse('mhacks-login') + '?username=' + user.email)
def update_password(request, uid, token):
user = validate_signed_token(uid, token)
if not user:
return HttpResponseForbidden() # Just straight up forbid this request, looking fishy already!
if request.method == 'POST':
form = SetPasswordForm(user, data=request.POST)
if form.is_valid():
form.save()
Token.objects.filter(user_id__exact=user.pk).delete()
return redirect(reverse('mhacks-login') + '?username='******'GET':
form = SetPasswordForm(user)
else:
return HttpResponseNotAllowed(permitted_methods=['GET', 'POST'])
form.fields['new_password2'].label = 'Confirm New Password'
form.fields['new_password2'].longest = True
return render(request, 'password_reset.html', {'form': form, 'type': 'reset', 'uid': uid, 'token': token})
def update_password(request, uid, token):
user = validate_signed_token(uid, token)
if not user:
return HttpResponseForbidden() # Just straight up forbid this request, looking fishy already!
if request.method == 'POST':
form = SetPasswordForm(user, data=request.POST)
if form.is_valid():
form.save()
Token.objects.filter(user_id__exact=user.pk).delete()
return redirect(reverse('mhacks-login') + '?username='******'GET':
form = SetPasswordForm(user)
else:
return HttpResponseNotAllowed(permitted_methods=['GET', 'POST'])
form.fields['new_password2'].label = 'Confirm New Password'
form.fields['new_password2'].longest = True
return render(request, 'password_reset.html', {'form': form, 'type': 'reset', 'uid': uid, 'token': token})
def request_verification_email(request, user_pk):
user = validate_signed_token(user_pk, None, require_token=False)
if user is not None:
send_verification_email(user, request)
return redirect(reverse('mhacks-login') + '?username=' + user.email)
def request_verification_email(request, user_pk):
user = validate_signed_token(user_pk, None, require_token=False)
if user is not None:
send_verification_email(user, request)
return redirect(reverse('mhacks-login') + '?username=' + user.email)
