app/main/views/forgot_password.py

from flask import render_template, request
from notifications_python_client.errors import HTTPError

from app import user_api_client
from app.main import main
from app.main.forms import ForgotPasswordForm


@main.route("/forgot-password", methods=["GET", "POST"])
def forgot_password():
    form = ForgotPasswordForm()
    if form.validate_on_submit():
        try:
            user_api_client.send_reset_password_url(
                form.email_address.data, next_string=request.args.get("next")
            )
        except HTTPError as e:
            if e.status_code == 404:
                return render_template("views/password-reset-sent.html")
            else:
                raise e
        return render_template("views/password-reset-sent.html")

    return render_template("views/forgot-password.html", form=form)
Forgot password sends redirect link with reset password email. This is so when users reset their password they are still redirected to pages they were meant to visit. This change was done specifically so everyone who is meant to see broadcast tour sees it, but it will improve lives of all users who wanted to visit a page on Notify but then had to reset their password in the process. 2020-10-05 15:51:44 +01:00			`from flask import render_template, request`
Should show the sent password reset link page when the user is not found. 2016-03-16 14:19:41 +00:00			`from notifications_python_client.errors import HTTPError`
Fix missing import 2016-02-17 09:51:54 +00:00
Enforce order and style of imports Done using isort[1], with the following command: ``` isort -rc ./app ./tests ``` Adds linting to the `run_tests.sh` script to stop badly-sorted imports getting re-introduced. Chosen style is ‘Vertical Hanging Indent’ with trailing commas, because I think it gives the cleanest diffs, eg: ``` from third_party import ( lib1, lib2, lib3, lib4, ) ``` 1. https://pypi.python.org/pypi/isort 2018-02-20 11:22:17 +00:00			`from app import user_api_client`
Add endpoints for forgot-password. 2016-01-04 14:00:39 +00:00			`from app.main import main`
Completion of forgot-password endpoints. Start implementation for new-password endpoints. Created PasswordResetToken model ToDo: create and save token, send valid url to user, check validity of token, update user's password, redirect to /two-factor. 2016-01-05 17:52:09 +00:00			`from app.main.forms import ForgotPasswordForm`
Add endpoints for forgot-password. 2016-01-04 14:00:39 +00:00

notify-api-412 use black to enforce python coding style 2023-08-25 09:12:23 -07:00			`@main.route("/forgot-password", methods=["GET", "POST"])`
Completion of forgot-password endpoints. Start implementation for new-password endpoints. Created PasswordResetToken model ToDo: create and save token, send valid url to user, check validity of token, update user's password, redirect to /two-factor. 2016-01-05 17:52:09 +00:00			`def forgot_password():`
Added fixes for forms to hide potential email philshing scams. 2016-01-28 16:36:36 +00:00			`form = ForgotPasswordForm()`
Add endpoints for forgot-password. 2016-01-04 14:00:39 +00:00			`if form.validate_on_submit():`
Should show the sent password reset link page when the user is not found. 2016-03-16 14:19:41 +00:00			`try:`
notify-api-412 use black to enforce python coding style 2023-08-25 09:12:23 -07:00			`user_api_client.send_reset_password_url(`
			`form.email_address.data, next_string=request.args.get("next")`
			`)`
Should show the sent password reset link page when the user is not found. 2016-03-16 14:19:41 +00:00			`except HTTPError as e:`
			`if e.status_code == 404:`
notify-api-412 use black to enforce python coding style 2023-08-25 09:12:23 -07:00			`return render_template("views/password-reset-sent.html")`
Should show the sent password reset link page when the user is not found. 2016-03-16 14:19:41 +00:00			`else:`
			`raise e`
notify-api-412 use black to enforce python coding style 2023-08-25 09:12:23 -07:00			`return render_template("views/password-reset-sent.html")`
Fix for forgot my password. 2016-01-27 18:01:43 +00:00
notify-api-412 use black to enforce python coding style 2023-08-25 09:12:23 -07:00			`return render_template("views/forgot-password.html", form=form)`