53 lines
1.4 KiB
Elixir
53 lines
1.4 KiB
Elixir
# Pleroma: A lightweight social networking server
|
|
# Copyright © 2017-2022 Pleroma Authors <https://pleroma.social/>
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
defmodule Pleroma.Web.TwitterAPI.PasswordController do
|
|
@moduledoc """
|
|
The module contains functions for password reset.
|
|
"""
|
|
|
|
use Pleroma.Web, :controller
|
|
|
|
require Logger
|
|
|
|
import Pleroma.Web.ControllerHelper, only: [json_response: 3]
|
|
|
|
alias Pleroma.PasswordResetToken
|
|
alias Pleroma.Repo
|
|
alias Pleroma.User
|
|
alias Pleroma.Web.TwitterAPI.TwitterAPI
|
|
|
|
plug(Pleroma.Web.Plugs.RateLimiter, [name: :request] when action == :request)
|
|
|
|
@doc "POST /auth/password"
|
|
def request(conn, params) do
|
|
nickname_or_email = params["email"] || params["nickname"]
|
|
|
|
TwitterAPI.password_reset(nickname_or_email)
|
|
|
|
json_response(conn, :no_content, "")
|
|
end
|
|
|
|
def reset(conn, %{"token" => token}) do
|
|
with %{used: false} = token <- Repo.get_by(PasswordResetToken, %{token: token}),
|
|
false <- PasswordResetToken.expired?(token),
|
|
%User{} = user <- User.get_cached_by_id(token.user_id) do
|
|
render(conn, "reset.html", %{
|
|
token: token,
|
|
user: user
|
|
})
|
|
else
|
|
_e -> render(conn, "invalid_token.html")
|
|
end
|
|
end
|
|
|
|
def do_reset(conn, %{"data" => data}) do
|
|
with {:ok, _} <- PasswordResetToken.reset_password(data["token"], data) do
|
|
render(conn, "reset_success.html")
|
|
else
|
|
_e -> render(conn, "reset_failed.html")
|
|
end
|
|
end
|
|
end
|