def post(self): form_data = [ self.get_argument('email',''),self.get_argument('civil-id',''),\ self.get_argument('student-id',''),self.get_argument('phone',''),\ self.get_argument('smsword','')] user_verified = False user_verified, user_dn = AD_User_Pass_Reset.verifyADuser(form_data[0],form_data[2],form_data[3]) #### ###reset cookie to something unknown to the end user (stop back-fwd multiple tries) self.set_secure_cookie("smsword", AD_User_Pass_Reset.gen_random_password(4)) if user_verified==True and self.get_secure_cookie('smsword')== form_data[4]: newpass=AD_User_Pass_Reset.gen_random_password() #Uncomment on production to reset password AD_User_Pass_Reset.resetUserPassword(user_dn,newpass) print 'successfuly generated a new password :'******'failed to generate a new password' self.render("failure.html") #for debugging purposes print 'secure cookie from form:' + form_data[4] print 'secure cookie from cookie:' + self.get_secure_cookie('smsword')
def get(self): self.set_secure_cookie("smsword", AD_User_Pass_Reset.gen_random_password(4)) ## if not self.get_secure_cookie("smsword"): ## self.set_secure_cookie("smsword", AD_User_Pass_Reset.gen_random_password(4)) ## print "Your cookie was not set yet!" ## else: ## print "Your cookie was set!" + self.get_secure_cookie("smsword") #self.write("URI: " + self.request.uri) self.render("index.html")