Skip to content
Snippets Groups Projects
Unverified Commit 4e431c15 authored by f00wl's avatar f00wl
Browse files

Unifying user reset auth routes

* update routes paths
* update aud in JWT
* update reset link
parent 8aef6d64
No related branches found
No related tags found
No related merge requests found
...@@ -29,7 +29,7 @@ def details(user_uuid): ...@@ -29,7 +29,7 @@ def details(user_uuid):
return flask.render_template("user_details.html", user=user) return flask.render_template("user_details.html", user=user)
@blueprint.route("/reset/<user_uuid>", methods=["GET", "POST"]) @blueprint.route("/auth/password/reset/<user_uuid>", methods=["GET", "POST"])
@security.admin_required() @security.admin_required()
@security.confirmation_required("generate a password reset link") @security.confirmation_required("generate a password reset link")
def password_reset(user_uuid): def password_reset(user_uuid):
...@@ -37,13 +37,13 @@ def password_reset(user_uuid): ...@@ -37,13 +37,13 @@ def password_reset(user_uuid):
expired = datetime.datetime.now() + datetime.timedelta(days=1) expired = datetime.datetime.now() + datetime.timedelta(days=1)
payload = { payload = {
"exp": int(expired.timestamp()), "exp": int(expired.timestamp()),
"aud": flask.url_for('account.reset'), "aud": flask.url_for('account.password_reset'),
"user_uuid": user.uuid "user_uuid": user.uuid
} }
header = {"alg": "HS512"} header = {"alg": "HS512"}
key = flask.current_app.config["SECRET_KEY"] key = flask.current_app.config["SECRET_KEY"]
token = jwt.encode(header, payload, key) token = jwt.encode(header, payload, key)
reset_link = flask.url_for("account.reset", token=token, _external=True) reset_link = flask.url_for("account.password_reset", token=token, _external=True)
flask.flash(_("Reset link: {}").format(reset_link), "success") flask.flash(_("Reset link: {}").format(reset_link), "success")
return flask.redirect(flask.url_for(".details", user_uuid=user.uuid)) return flask.redirect(flask.url_for(".details", user_uuid=user.uuid))
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment