darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-09-09 17:45:32 -04:00
Code Issues Packages Projects Releases Wiki Activity

Fix wording

Browse Source 
Changed forgot-password so that it does not expose to the user that the email address does not exist.
This commit is contained in:
Rebecca Law
2016-01-08 16:47:34 +00:00
parent 677f8891b2
commit f7373ee5fc
5 changed files with 14 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
app/main/views/forgot_password.py
View File

@@ -1,4 +1,4 @@
from flask import render_template, flash
from flask import render_template, flash, current_app
from app.main import main
from app.main.dao import users_dao
from app.main.forms import ForgotPasswordForm
@@ -7,9 +7,12 @@ from app.main.views import send_change_password_email
@main.route('/forgot-password', methods=['GET', 'POST'])
def forgot_password():
form = ForgotPasswordForm(users_dao.get_user_by_email)
form = ForgotPasswordForm()
if form.validate_on_submit():
send_change_password_email(form.email_address.data)
return render_template('views/password-reset-sent.html')
if users_dao.get_user_by_email(form.email_address.data):
send_change_password_email(form.email_address.data)
return render_template('views/password-reset-sent.html')
else:
current_app.logger.info('The email address used does not exist.')
else:
return render_template('views/forgot-password.html', form=form)