def get(self, link, expired=False, error=False, msg=''):
username = ''
if expired == False:
usr = user.check_password_reset_link(link)
if usr == None:
expired = True
else:
username = usr.username
render_page(self, "set_password", expired= expired, error=error, msg=msg)
def post(self, link):
usr = user.check_password_reset_link(link)
password = self.request.get('password')
confirm = self.request.get('confirm')
expired = False
error = False
msg = ''
if usr:
msg = user.validate_password(password, confirm)
if not msg:
user.reset_user_password(usr, password)
user.clear_password_reset_link(usr)
self.redirect('/login')
else:
error = True
else:
expired = True
self.get(link, expired=expired, error=error, msg=msg)
