forked from vikunja/vikunja
91 lines
2.1 KiB
Go
91 lines
2.1 KiB
Go
package models
|
|
|
|
import (
|
|
"code.vikunja.io/api/models/mail"
|
|
"code.vikunja.io/api/models/utils"
|
|
)
|
|
|
|
// PasswordReset holds the data to reset a password
|
|
type PasswordReset struct {
|
|
UserID int64 `json:"user_id"`
|
|
Token string `json:"token"`
|
|
NewPassword string `json:"new_password"`
|
|
}
|
|
|
|
// UserPasswordReset resets a users password
|
|
func UserPasswordReset(reset *PasswordReset) (err error) {
|
|
|
|
// Check if the password is not empty
|
|
if reset.NewPassword == "" {
|
|
return ErrNoUsernamePassword{}
|
|
}
|
|
|
|
// Check if the user exists
|
|
user, err := GetUserByID(reset.UserID)
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
// Check if we have a token
|
|
exists, err := x.Where("password_reset_token = ? AND id = ?", reset.Token, user.ID).Exist(&User{})
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
if !exists {
|
|
return ErrInvalidPasswordResetToken{UserID: reset.UserID, Token: reset.Token}
|
|
}
|
|
|
|
// Hash the password
|
|
user.Password, err = hashPassword(reset.NewPassword)
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
// Save it
|
|
_, err = x.Where("id = ?", user.ID).Update(&user)
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
// Send a mail to the user to notify it his password was changed.
|
|
data := map[string]interface{}{
|
|
"User": user,
|
|
}
|
|
|
|
mail.SendMailWithTemplate(user.Email, "Your password on Vikunja was changed", "password-changed", data)
|
|
|
|
return
|
|
}
|
|
|
|
// PasswordTokenRequest defines the request format for password reset resqest
|
|
type PasswordTokenRequest struct {
|
|
Username string `json:"user_name"`
|
|
}
|
|
|
|
// RequestUserPasswordResetToken inserts a random token to reset a users password into the databsse
|
|
func RequestUserPasswordResetToken(tr *PasswordTokenRequest) (err error) {
|
|
// Check if the user exists
|
|
user, err := GetUser(User{Username: tr.Username})
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
// Generate a token and save it
|
|
user.PasswordResetToken = utils.MakeRandomString(400)
|
|
|
|
// Save it
|
|
_, err = x.Where("id = ?", user.ID).Update(&user)
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
data := map[string]interface{}{
|
|
"User": user,
|
|
}
|
|
|
|
// Send the user a mail with the reset token
|
|
mail.SendMailWithTemplate(user.Email, "Reset your password on Vikunja", "reset-password", data)
|
|
return
|
|
}
|