def get_email_for_inboxes(self, entry_ref, inboxes):
subscribers_ref = self.get_actors_for_inboxes(inboxes)
email_aliases = []
parent_entry_ref = api.entry_get_safe(api.ROOT, entry_ref.entry)
owners = [entry_ref.owner, entry_ref.actor]
if parent_entry_ref:
owners.extend((parent_entry_ref.owner, parent_entry_ref.actor))
for subscriber_ref in subscribers_ref:
# Only email if you are directly involved in the stream
if subscriber_ref.nick not in owners:
exists = api.subscription_exists(
api.ROOT, entry_ref.entry,
'inbox/%s/overview' % subscriber_ref.nick)
if not exists:
continue
if not subscriber_ref.extra.get('email_notify'):
continue
email = api.email_get_actor(api.ROOT, subscriber_ref.nick)
if not email:
continue
actor_ref = api.actor_get(api.ROOT, entry_ref.actor)
if subscriber_ref.nick == actor_ref.nick:
continue
email_aliases.append(email)
return set(email_aliases)
def get_email_for_inboxes(self, entry_ref, inboxes):
subscribers_ref = self.get_actors_for_inboxes(inboxes)
email_aliases = []
parent_entry_ref = api.entry_get_safe(api.ROOT, entry_ref.entry)
owners = [entry_ref.owner, entry_ref.actor]
if parent_entry_ref:
owners.extend((parent_entry_ref.owner, parent_entry_ref.actor))
for subscriber_ref in subscribers_ref:
# Only email if you are directly involved in the stream
if subscriber_ref.nick not in owners:
exists = api.subscription_exists(
api.ROOT,
entry_ref.entry,
'inbox/%s/overview' % subscriber_ref.nick)
if not exists:
continue
if not subscriber_ref.extra.get('email_notify'):
continue
email = api.email_get_actor(api.ROOT, subscriber_ref.nick)
if not email:
continue
actor_ref = api.actor_get(api.ROOT, entry_ref.actor)
if subscriber_ref.nick == actor_ref.nick:
continue
email_aliases.append(email)
return set(email_aliases)
def test_login_reset(self):
r = self.client.post(
"/login/forgot",
{"_nonce": util.create_nonce(None, "login_forgot"), "login_forgot": "", "nick_or_email": "popular"},
)
email = api.email_get_actor(api.ROOT, "popular")
activation_ref = api.activation_get(api.ROOT, email, "password_lost", email)
self.assert_(activation_ref)
hash = util.hash_generic(activation_ref.code)
r = self.client.get("/login/reset", {"email": email, "hash": hash})
self.assertContains(r, "Your password has been reset")
# once it's used, the activation link cannot be used again
r = self.client.get("/login/reset", {"email": email, "hash": hash})
self.assertRedirectsPrefix(r, "/error", target_status_code=200)
def test_login_reset(self):
r = self.client.post(
'/login/forgot', {
'_nonce': util.create_nonce(None, 'login_forgot'),
'login_forgot': '',
'nick_or_email': 'popular',
})
email = api.email_get_actor(api.ROOT, 'popular')
activation_ref = api.activation_get(api.ROOT, email, 'password_lost',
email)
self.assert_(activation_ref)
hash = util.hash_generic(activation_ref.code)
r = self.client.get('/login/reset', {'email': email, 'hash': hash})
self.assertContains(r, 'Your password has been reset')
# once it's used, the activation link cannot be used again
r = self.client.get('/login/reset', {'email': email, 'hash': hash})
self.assertRedirectsPrefix(r, '/error', target_status_code=200)
def test_login_reset(self):
r = self.client.post('/login/forgot',
{
'_nonce': util.create_nonce(None, 'login_forgot'),
'login_forgot' : '',
'nick_or_email' : 'popular',
})
email = api.email_get_actor(api.ROOT, 'popular')
activation_ref = api.activation_get(api.ROOT,
email,
'password_lost',
email)
self.assert_(activation_ref)
hash = util.hash_generic(activation_ref.code)
r = self.client.get('/login/reset', {'email' : email, 'hash' : hash})
self.assertContains(r, 'Your password has been reset')
# once it's used, the activation link cannot be used again
r = self.client.get('/login/reset', {'email' : email, 'hash' : hash})
self.assertRedirectsPrefix(r, '/error', target_status_code=200)
def actor_settings(request, nick, page='index'):
""" just a static page that links to the rest"""
nick = clean.nick(nick)
view = api.actor_lookup_nick(api.ROOT, nick)
if not api.actor_owns_actor(request.user, view):
raise exception.ApiOwnerRequired(
'Operation not allowed: %s does not own %s'
% (request.user and request.user.nick or '(nobody)', view.nick))
handled = common_views.handle_view_action(
request,
{
'activation_activate_mobile': view.url('/settings/mobile'),
'activation_request_email': view.url('/settings/email'),
'activation_request_mobile': view.url('/settings/mobile'),
'settings_change_notify': view.url('/settings/notifications'),
'settings_change_privacy': request.path,
'settings_update_account': view.url('/settings/profile'),
'actor_remove': '/logout',
#'oauth_remove_consumer': request.path,
#'oauth_remove_access_token': request.path
}
)
if handled:
return handled
# TODO(tyler/termie): This conflicts with the global settings import.
# Also, this seems fishy. Do none of the settings.* items work in templates?
import settings
# TODO(tyler): Merge this into handle_view_action, if possible
if 'password' in request.POST:
try:
validate.nonce(request, 'change_password')
password = request.POST.get('password', '')
confirm = request.POST.get('confirm', '')
validate.password_and_confirm(password, confirm, field = 'password')
api.settings_change_password(request.user, view.nick, password)
response = util.RedirectFlash(view.url() + '/settings/password',
'Password updated')
request.user.password = util.hash_password(request.user.nick, password)
# TODO(mikie): change when cookie-auth is changed
user.set_user_cookie(response, request.user)
return response
except:
exception.handle_exception(request)
if page == 'feeds':
try:
if not settings.FEEDS_ENABLED:
raise exception.DisabledFeatureError('Feeds are currently disabled')
except:
exception.handle_exception(request)
if page == 'photo':
redirect_to = view.url() + '/settings/photo'
handled = common_views.common_photo_upload(request, redirect_to)
if handled:
return handled
area = 'settings'
full_page = page.capitalize()
if page == 'mobile':
full_page = 'Mobile Number'
mobile = api.mobile_get_actor(request.user, view.nick)
sms_notify = view.extra.get('sms_notify', False)
elif page == 'im':
full_page = 'IM Address'
im_address = api.im_get_actor(request.user, view.nick)
im_notify = view.extra.get('im_notify', False)
elif page == 'index':
email = api.email_get_actor(request.user, view.nick)
email_notify = view.extra.get('email_notify', False)
im_address = api.im_get_actor(request.user, view.nick)
im_notify = view.extra.get('im_notify', False)
elif page == 'feeds':
full_page = 'Web Feeds'
elif page == 'email':
full_page = 'Email Address'
email_notify = view.extra.get('email_notify', False)
# check if we already have an email
email = api.email_get_actor(request.user, view.nick)
# otherwise look for an unconfirmed one
if not email:
unconfirmeds = api.activation_get_actor_email(api.ROOT, view.nick)
if unconfirmeds:
unconfirmed_email = unconfirmeds[0].content
elif page == 'design':
handled = common_views.common_design_update(request, view.nick)
if handled:
return handled
full_page = 'Look and Feel'
elif page == 'notifications':
email = api.email_get_actor(request.user, view.nick)
email_notify = view.extra.get('email_notify', False)
im_address = api.im_get_actor(request.user, view.nick)
im_notify = view.extra.get('im_notify', False)
mobile = api.mobile_get_actor(request.user, request.user.nick)
sms_notify = view.extra.get('sms_notify', False)
sms_confirm = sms_notify and not view.extra.get('sms_confirmed', False)
# TODO(termie): remove this once we can actually receive sms
sms_confirm = False
elif page == 'profile':
# check if we already have an email
email = api.email_get_actor(request.user, view.nick)
# otherwise look for an unconfirmed one
if not email:
unconfirmeds = api.activation_get_actor_email(api.ROOT, view.nick)
if unconfirmeds:
unconfirmed_email = unconfirmeds[0].content
elif page == 'photo':
avatars = display.DEFAULT_AVATARS
small_photos = api.image_get_all_keys(request.user, view.nick, size='f')
# TODO(tyler): Fix this avatar nonsense!
own_photos = [{
'path' : small_photo.key().name(),
'name' : small_photo.key().name()[len('image/'):-len('_f.jpg')],
} for small_photo in small_photos
]
elif page == 'privacy':
PRIVACY_PUBLIC = api.PRIVACY_PUBLIC
PRIVACY_CONTACTS = api.PRIVACY_CONTACTS
elif page == 'jsbadge':
full_page = 'Javascript Badges'
elif page == 'badge':
badges = [{'id': 'badge-stream',
'width': '200',
'height': '300',
'src': '/themes/%s/badge.swf' % settings.DEFAULT_THEME,
'title': 'Stream',
},
{'id': 'badge-map',
'width': '200',
'height': '255',
'src': '/themes/%s/badge-map.swf' % settings.DEFAULT_THEME,
'title': 'Map',
},
{'id': 'badge-simple',
'width': '200',
'height': '200',
'src': '/themes/%s/badge-simple.swf' % settings.DEFAULT_THEME,
'title': 'Simple',
},
]
elif page in ['password', 'delete']:
# Catch for remaining pages before we generate a 404.
pass
else:
return common_views.common_404(request)
# rendering
c = template.RequestContext(request, locals())
t = loader.get_template('actor/templates/settings_%s.html' % page)
return http.HttpResponse(t.render(c))
def actor_settings(request, nick, page='index'):
""" just a static page that links to the rest"""
nick = clean.nick(nick)
view = api.actor_lookup_nick(api.ROOT, nick)
if not api.actor_owns_actor(request.user, view):
raise exception.ApiOwnerRequired(
'Operation not allowed: %s does not own %s' %
(request.user and request.user.nick or '(nobody)', view.nick))
handled = common_views.handle_view_action(
request,
{
'activation_activate_mobile': view.url('/settings/mobile'),
'activation_request_email': view.url('/settings/email'),
'activation_request_mobile': view.url('/settings/mobile'),
'settings_change_notify': view.url('/settings/notifications'),
'settings_change_privacy': request.path,
'settings_update_account': view.url('/settings/profile'),
'actor_remove': '/logout',
#'oauth_remove_consumer': request.path,
#'oauth_remove_access_token': request.path
})
if handled:
return handled
# TODO(tyler/termie): This conflicts with the global settings import.
# Also, this seems fishy. Do none of the settings.* items work in templates?
import settings
# TODO(tyler): Merge this into handle_view_action, if possible
if 'password' in request.POST:
try:
validate.nonce(request, 'change_password')
password = request.POST.get('password', '')
confirm = request.POST.get('confirm', '')
validate.password_and_confirm(password, confirm, field='password')
api.settings_change_password(request.user, view.nick, password)
response = util.RedirectFlash(view.url() + '/settings/password',
'Password updated')
request.user.password = util.hash_password(request.user.nick,
password)
# TODO(mikie): change when cookie-auth is changed
user.set_user_cookie(response, request.user)
return response
except:
exception.handle_exception(request)
if page == 'feeds':
try:
if not settings.FEEDS_ENABLED:
raise exception.DisabledFeatureError(
'Feeds are currently disabled')
except:
exception.handle_exception(request)
if page == 'photo':
redirect_to = view.url() + '/settings/photo'
handled = common_views.common_photo_upload(request, redirect_to)
if handled:
return handled
area = 'settings'
full_page = page.capitalize()
if page == 'mobile':
full_page = 'Mobile Number'
mobile = api.mobile_get_actor(request.user, view.nick)
sms_notify = view.extra.get('sms_notify', False)
elif page == 'im':
full_page = 'IM Address'
im_address = api.im_get_actor(request.user, view.nick)
im_notify = view.extra.get('im_notify', False)
elif page == 'index':
email = api.email_get_actor(request.user, view.nick)
email_notify = view.extra.get('email_notify', False)
im_address = api.im_get_actor(request.user, view.nick)
im_notify = view.extra.get('im_notify', False)
elif page == 'feeds':
full_page = 'Web Feeds'
elif page == 'email':
full_page = 'Email Address'
email_notify = view.extra.get('email_notify', False)
# check if we already have an email
email = api.email_get_actor(request.user, view.nick)
# otherwise look for an unconfirmed one
if not email:
unconfirmeds = api.activation_get_actor_email(api.ROOT, view.nick)
if unconfirmeds:
unconfirmed_email = unconfirmeds[0].content
elif page == 'design':
handled = common_views.common_design_update(request, view.nick)
if handled:
return handled
full_page = 'Look and Feel'
elif page == 'notifications':
email = api.email_get_actor(request.user, view.nick)
email_notify = view.extra.get('email_notify', False)
im_address = api.im_get_actor(request.user, view.nick)
im_notify = view.extra.get('im_notify', False)
mobile = api.mobile_get_actor(request.user, request.user.nick)
sms_notify = view.extra.get('sms_notify', False)
sms_confirm = sms_notify and not view.extra.get('sms_confirmed', False)
# TODO(termie): remove this once we can actually receive sms
sms_confirm = False
elif page == 'profile':
# check if we already have an email
email = api.email_get_actor(request.user, view.nick)
# otherwise look for an unconfirmed one
if not email:
unconfirmeds = api.activation_get_actor_email(api.ROOT, view.nick)
if unconfirmeds:
unconfirmed_email = unconfirmeds[0].content
elif page == 'photo':
avatars = display.DEFAULT_AVATARS
small_photos = api.image_get_all_keys(request.user,
view.nick,
size='f')
# TODO(tyler): Fix this avatar nonsense!
own_photos = [{
'path':
small_photo.key().name(),
'name':
small_photo.key().name()[len('image/'):-len('_f.jpg')],
} for small_photo in small_photos]
elif page == 'privacy':
PRIVACY_PUBLIC = api.PRIVACY_PUBLIC
PRIVACY_CONTACTS = api.PRIVACY_CONTACTS
elif page in ['password', 'delete']:
# Catch for remaining pages before we generate a 404.
pass
else:
return common_views.common_404(request)
# rendering
c = template.RequestContext(request, locals())
t = loader.get_template('actor/templates/settings_%s.html' % page)
return http.HttpResponse(t.render(c))
def actor_settings(request, nick, page="index"):
""" just a static page that links to the rest"""
nick = clean.nick(nick)
view = api.actor_lookup_nick(api.ROOT, nick)
if not api.actor_owns_actor(request.user, view):
raise exception.ApiOwnerRequired(
"Operation not allowed: %s does not own %s" % (request.user and request.user.nick or "(nobody)", view.nick)
)
handled = common_views.handle_view_action(
request,
{
"activation_activate_mobile": view.url("/settings/mobile"),
"activation_request_email": view.url("/settings/email"),
"activation_request_mobile": view.url("/settings/mobile"),
"settings_change_notify": view.url("/settings/notifications"),
"settings_change_privacy": request.path,
"settings_update_account": view.url("/settings/profile"),
"actor_remove": "/logout",
#'oauth_remove_consumer': request.path,
#'oauth_remove_access_token': request.path
},
)
if handled:
return handled
# TODO(tyler/termie): This conflicts with the global settings import.
# Also, this seems fishy. Do none of the settings.* items work in templates?
import settings
# TODO(tyler): Merge this into handle_view_action, if possible
if "password" in request.POST:
try:
validate.nonce(request, "change_password")
password = request.POST.get("password", "")
confirm = request.POST.get("confirm", "")
validate.password_and_confirm(password, confirm, field="password")
api.settings_change_password(request.user, view.nick, password)
response = util.RedirectFlash(view.url() + "/settings/password", "Password updated")
request.user.password = util.hash_password(request.user.nick, password)
# TODO(mikie): change when cookie-auth is changed
user.set_user_cookie(response, request.user)
return response
except:
exception.handle_exception(request)
if page == "feeds":
try:
if not settings.FEEDS_ENABLED:
raise exception.DisabledFeatureError("Feeds are currently disabled")
except:
exception.handle_exception(request)
if page == "photo":
redirect_to = view.url() + "/settings/photo"
handled = common_views.common_photo_upload(request, redirect_to)
if handled:
return handled
area = "settings"
full_page = page.capitalize()
if page == "mobile":
full_page = "Mobile Number"
mobile = api.mobile_get_actor(request.user, view.nick)
sms_notify = view.extra.get("sms_notify", False)
elif page == "im":
full_page = "IM Address"
im_address = api.im_get_actor(request.user, view.nick)
im_notify = view.extra.get("im_notify", False)
elif page == "index":
email = api.email_get_actor(request.user, view.nick)
email_notify = view.extra.get("email_notify", False)
im_address = api.im_get_actor(request.user, view.nick)
im_notify = view.extra.get("im_notify", False)
elif page == "feeds":
full_page = "Web Feeds"
elif page == "email":
full_page = "Email Address"
email_notify = view.extra.get("email_notify", False)
# check if we already have an email
email = api.email_get_actor(request.user, view.nick)
# otherwise look for an unconfirmed one
if not email:
unconfirmeds = api.activation_get_actor_email(api.ROOT, view.nick)
if unconfirmeds:
unconfirmed_email = unconfirmeds[0].content
elif page == "design":
redirect_to = view.url() + "/settings/design"
handled = common_views.common_design_update(request, redirect_to, view.nick)
if handled:
return handled
full_page = "Look and Feel"
elif page == "notifications":
email = api.email_get_actor(request.user, view.nick)
email_notify = view.extra.get("email_notify", False)
im_address = api.im_get_actor(request.user, view.nick)
im_notify = view.extra.get("im_notify", False)
mobile = api.mobile_get_actor(request.user, request.user.nick)
sms_notify = view.extra.get("sms_notify", False)
sms_confirm = sms_notify and not view.extra.get("sms_confirmed", False)
# TODO(termie): remove this once we can actually receive sms
sms_confirm = False
elif page == "profile":
# check if we already have an email
email = api.email_get_actor(request.user, view.nick)
# otherwise look for an unconfirmed one
if not email:
unconfirmeds = api.activation_get_actor_email(api.ROOT, view.nick)
if unconfirmeds:
unconfirmed_email = unconfirmeds[0].content
elif page == "photo":
avatars = display.DEFAULT_AVATARS
small_photos = api.image_get_all_keys(request.user, view.nick, size="f")
# TODO(tyler): Fix this avatar nonsense!
own_photos = [
{"path": small_photo.key().name(), "name": small_photo.key().name()[len("images/") : -len("_f.jpg")]}
for small_photo in small_photos
]
elif page == "privacy":
PRIVACY_PUBLIC = api.PRIVACY_PUBLIC
PRIVACY_CONTACTS = api.PRIVACY_CONTACTS
elif page == "jsbadge":
full_page = "Javascript Badges"
elif page == "badge":
badges = [
{
"id": "badge-stream",
"width": "200",
"height": "300",
"src": "/themes/%s/badge.swf" % settings.DEFAULT_THEME,
"title": "Stream",
},
{
"id": "badge-map",
"width": "200",
"height": "255",
"src": "/themes/%s/badge-map.swf" % settings.DEFAULT_THEME,
"title": "Map",
},
{
"id": "badge-simple",
"width": "200",
"height": "200",
"src": "/themes/%s/badge-simple.swf" % settings.DEFAULT_THEME,
"title": "Simple",
},
]
elif page in ["password", "delete"]:
# Catch for remaining pages before we generate a 404.
pass
else:
return common_views.common_404(request)
# rendering
c = template.RequestContext(request, locals())
t = loader.get_template("actor/templates/settings_%s.html" % page)
return http.HttpResponse(t.render(c))