|
|
|
|
@ -16,7 +16,7 @@ from controllers.console.auth.error import (
|
|
|
|
|
PasswordMismatchError,
|
|
|
|
|
)
|
|
|
|
|
from controllers.console.error import AccountInFreezeError, AccountNotFound, EmailSendIpLimitError
|
|
|
|
|
from controllers.console.wraps import setup_required
|
|
|
|
|
from controllers.console.wraps import email_password_login_enabled, setup_required
|
|
|
|
|
from events.tenant_event import tenant_was_created
|
|
|
|
|
from extensions.ext_database import db
|
|
|
|
|
from libs.helper import email, extract_remote_ip
|
|
|
|
|
@ -30,6 +30,7 @@ from services.feature_service import FeatureService
|
|
|
|
|
|
|
|
|
|
class ForgotPasswordSendEmailApi(Resource):
|
|
|
|
|
@setup_required
|
|
|
|
|
@email_password_login_enabled
|
|
|
|
|
def post(self):
|
|
|
|
|
parser = reqparse.RequestParser()
|
|
|
|
|
parser.add_argument("email", type=email, required=True, location="json")
|
|
|
|
|
@ -62,6 +63,7 @@ class ForgotPasswordSendEmailApi(Resource):
|
|
|
|
|
|
|
|
|
|
class ForgotPasswordCheckApi(Resource):
|
|
|
|
|
@setup_required
|
|
|
|
|
@email_password_login_enabled
|
|
|
|
|
def post(self):
|
|
|
|
|
parser = reqparse.RequestParser()
|
|
|
|
|
parser.add_argument("email", type=str, required=True, location="json")
|
|
|
|
|
@ -86,12 +88,21 @@ class ForgotPasswordCheckApi(Resource):
|
|
|
|
|
AccountService.add_forgot_password_error_rate_limit(args["email"])
|
|
|
|
|
raise EmailCodeError()
|
|
|
|
|
|
|
|
|
|
# Verified, revoke the first token
|
|
|
|
|
AccountService.revoke_reset_password_token(args["token"])
|
|
|
|
|
|
|
|
|
|
# Refresh token data by generating a new token
|
|
|
|
|
_, new_token = AccountService.generate_reset_password_token(
|
|
|
|
|
user_email, code=args["code"], additional_data={"phase": "reset"}
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
AccountService.reset_forgot_password_error_rate_limit(args["email"])
|
|
|
|
|
return {"is_valid": True, "email": token_data.get("email")}
|
|
|
|
|
return {"is_valid": True, "email": token_data.get("email"), "token": new_token}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
class ForgotPasswordResetApi(Resource):
|
|
|
|
|
@setup_required
|
|
|
|
|
@email_password_login_enabled
|
|
|
|
|
def post(self):
|
|
|
|
|
parser = reqparse.RequestParser()
|
|
|
|
|
parser.add_argument("token", type=str, required=True, nullable=False, location="json")
|
|
|
|
|
@ -107,6 +118,9 @@ class ForgotPasswordResetApi(Resource):
|
|
|
|
|
reset_data = AccountService.get_reset_password_data(args["token"])
|
|
|
|
|
if not reset_data:
|
|
|
|
|
raise InvalidTokenError()
|
|
|
|
|
# Must use token in reset phase
|
|
|
|
|
if reset_data.get("phase", "") != "reset":
|
|
|
|
|
raise InvalidTokenError()
|
|
|
|
|
|
|
|
|
|
# Revoke token to prevent reuse
|
|
|
|
|
AccountService.revoke_reset_password_token(args["token"])
|
|
|
|
|
|