def passwordreset(token):
if current_user.is_authenticated:
return redirect(url_for('main.index'))
user = User.verify_password_reset_token(token)
if not user:
return redirect(url_for('auth.welcome'))
form = PasswordResetForm()
if form.validate_on_submit():
user.set_password(form.password_new.data)
user.save()
flash("Your password has been reset.")
return redirect(url_for('auth.welcome'))
if not form.validate():
flash("Password reset failed. Please correct errors.")
return render_template('auth/reset_password.html', form=form)
