wassname/flask-security
1
0
Fork 0
mirror of https://github.com/wassname/flask-security.git synced 2026-08-02 12:40:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'develop' of github.com:mattupstate/flask-security into develop

Browse Source
This commit is contained in:
Matt Wright
2014-01-24 10:32:09 -05:00
parent d314e54680 f854c24094
commit 668b4ee651
2 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
flask_security/utils.py
+4
View File
@@ -318,6 +318,10 @@ def get_token_status(token, serializer, max_age=None):
expired = True
except BadSignature:
invalid = True
except TypeError:
invalid = True
except ValueError:
invalid = True
if data:
user = _datastore.find_user(id=data[0])
tests/configured_tests.py
+10
View File
@@ -426,6 +426,16 @@ class RecoverableTests(SecurityTest):
m = self.get_message('INVALID_RESET_PASSWORD_TOKEN')
self.assertIn(m.encode('utf-8'), r.data)
def test_reset_password_with_mangled_token(self):
t = "WyIxNjQ2MzYiLCIxMzQ1YzBlZmVhM2VhZjYwODgwMDhhZGU2YzU0MzZjMiJd.BZEw_Q.lQyo3npdPZtcJ_sNHVHP103syjM&url_id=fbb89a8328e58c181ea7d064c2987874bc54a23d"
r = self._post('/reset/' + t, data={
'password': 'newpassword',
'password_confirm': 'newpassword'
}, follow_redirects=True)
m = self.get_message('INVALID_RESET_PASSWORD_TOKEN')
self.assertIn(m.encode('utf-8'), r.data)
class ExpiredResetPasswordTest(SecurityTest):