mirror of
https://github.com/wassname/flask-security.git
synced 2026-07-05 17:30:14 +08:00
Matt Wright
91 lines
2.4 KiB
Python
91 lines
2.4 KiB
Python
|
|
from datetime import datetime
|
|
|
|
from flask import current_app, request, url_for
|
|
from flask.ext.security.exceptions import UserNotFoundError, \
|
|
ConfirmationError, ConfirmationExpiredError
|
|
from flask.ext.security.utils import generate_token, send_mail
|
|
from werkzeug.local import LocalProxy
|
|
|
|
security = LocalProxy(lambda: current_app.security)
|
|
logger = LocalProxy(lambda: current_app.logger)
|
|
|
|
|
|
def find_user_by_confirmation_token(token):
|
|
if not token:
|
|
raise ConfirmationError('Unknown confirmation token')
|
|
return security.datastore.find_user(confirmation_token=token)
|
|
|
|
|
|
def send_confirmation_instructions(user):
|
|
url = url_for('flask_security.confirm',
|
|
confirmation_token=user.confirmation_token)
|
|
|
|
confirmation_link = request.url_root[:-1] + url
|
|
|
|
send_mail('Please confirm your email', user.email,
|
|
'confirmation_instructions',
|
|
dict(user=user, confirmation_link=confirmation_link))
|
|
|
|
return True
|
|
|
|
|
|
def generate_confirmation_token(user):
|
|
while True:
|
|
token = generate_token()
|
|
try:
|
|
find_user_by_confirmation_token(token)
|
|
except UserNotFoundError:
|
|
break
|
|
|
|
now = datetime.utcnow()
|
|
|
|
try:
|
|
user['confirmation_token'] = token
|
|
user['confirmation_sent_at'] = now
|
|
except TypeError:
|
|
user.confirmation_token = token
|
|
user.confirmation_sent_at = now
|
|
|
|
return user
|
|
|
|
|
|
def should_confirm_email(fn):
|
|
def wrapped(*args, **kwargs):
|
|
if security.confirm_email:
|
|
return fn(*args, **kwargs)
|
|
return False
|
|
return wrapped
|
|
|
|
|
|
@should_confirm_email
|
|
def requires_confirmation(user):
|
|
return not security.login_without_confirmation and \
|
|
not confirmation_token_is_expired(user)
|
|
|
|
|
|
@should_confirm_email
|
|
def confirmation_token_is_expired(user):
|
|
token_expires = datetime.utcnow() - security.confirm_email_within
|
|
return user.confirmation_sent_at < token_expires
|
|
|
|
|
|
def confirm_by_token(token):
|
|
user = find_user_by_confirmation_token(token)
|
|
|
|
if confirmation_token_is_expired(user):
|
|
raise ConfirmationExpiredError(user=user)
|
|
|
|
user.confirmed_at = datetime.utcnow()
|
|
#user.confirmation_token = None
|
|
#user.confirmation_sent_at = None
|
|
|
|
security.datastore._save_model(user)
|
|
|
|
return user
|
|
|
|
|
|
def reset_confirmation_token(user):
|
|
security.datastore._save_model(generate_confirmation_token(user))
|
|
send_confirmation_instructions(user)
|