1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
#
# Copyright (c) 2017 ThoughtWorks, Inc.
#
# Pixelated is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# Pixelated is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with Pixelated. If not, see <http://www.gnu.org/licenses/>.
import os
import json
from twisted.python.filepath import FilePath
from twisted.web.http import OK, INTERNAL_SERVER_ERROR
from twisted.web.template import Element, XMLFile, renderElement
from twisted.web.server import NOT_DONE_YET
from twisted.internet import defer
from twisted.logger import Logger
from pixelated.resources import BaseResource
from pixelated.resources import get_public_static_folder
log = Logger()
class InvalidPasswordError(Exception):
pass
class AccountRecoveryPage(Element):
loader = XMLFile(FilePath(os.path.join(get_public_static_folder(), 'account_recovery.html')))
def __init__(self):
super(AccountRecoveryPage, self).__init__()
class AccountRecoveryResource(BaseResource):
BASE_URL = 'account-recovery'
isLeaf = True
def __init__(self, services_factory):
BaseResource.__init__(self, services_factory)
def render_GET(self, request):
request.setResponseCode(OK)
return self._render_template(request)
def _render_template(self, request):
site = AccountRecoveryPage()
return renderElement(request, site)
def render_POST(self, request):
def success_response(response):
request.setResponseCode(OK)
request.finish()
def error_response(failure):
log.warn(failure)
request.setResponseCode(INTERNAL_SERVER_ERROR)
request.finish()
d = self._handle_post(request)
d.addCallbacks(success_response, error_response)
return NOT_DONE_YET
def _get_post_form(self, request):
return json.loads(request.content.getvalue())
def _validate_password(self, password, confirm_password):
return password == confirm_password and len(password) >= 8 and len(password) <= 9999
def _handle_post(self, request):
form = self._get_post_form(request)
password = form.get('password')
confirm_password = form.get('confirmPassword')
if not self._validate_password(password, confirm_password):
return defer.fail(InvalidPasswordError('The user entered an invalid password or confirmation'))
return defer.succeed('Done!')
|