diff --git a/gen/generator.py b/gen/generator.py
index f93ac6b..163e73c 100644
--- a/gen/generator.py
+++ b/gen/generator.py
@@ -487,6 +487,14 @@ class ZopeGenerator(Generator):
msg('enable_cookies', '', msg.ENABLE_COOKIES),
msg('page_previous', '', msg.PAGE_PREVIOUS),
msg('page_next', '', msg.PAGE_NEXT),
+ msg('forgot_password', '', msg.FORGOT_PASSWORD),
+ msg('ask_password_reinit', '', msg.ASK_PASSWORD_REINIT),
+ msg('reinit_mail_sent', '', msg.REINIT_MAIL_SENT),
+ msg('reinit_password', '', msg.REINIT_PASSWORD),
+ msg('reinit_password_body', '', msg.REINIT_PASSWORD_BODY),
+ msg('new_password', '', msg.NEW_PASSWORD),
+ msg('new_password_body', '', msg.NEW_PASSWORD_BODY),
+ msg('new_password_sent', '', msg.NEW_PASSWORD_SENT),
]
# Create a label for every role added by this application
for role in self.getAllUsedRoles():
diff --git a/gen/mixins/ToolMixin.py b/gen/mixins/ToolMixin.py
index 2cf7149..ad38edb 100644
--- a/gen/mixins/ToolMixin.py
+++ b/gen/mixins/ToolMixin.py
@@ -4,11 +4,12 @@ from appy.shared import mimeTypes
from appy.shared.utils import getOsTempFolder, sequenceTypes
from appy.shared.data import languages
import appy.gen
-from appy.gen import Type, Search, Selection
+from appy.gen import Type, Search, Selection, String
from appy.gen.utils import SomeObjects, getClassName
from appy.gen.mixins import BaseMixin
from appy.gen.wrappers import AbstractWrapper
from appy.gen.descriptors import ClassDescriptor
+from appy.gen.mail import sendMail
try:
from AccessControl.ZopeSecurityPolicy import _noroles
except ImportError:
@@ -1042,4 +1043,68 @@ class ToolMixin(BaseMixin):
if hasattr(self.o.aq_base, 'pages') and self.o.pages:
return [self.getObject(uid) for uid in self.o.pages ]
return ()
+
+ def askPasswordReinit(self):
+ '''A user (anonymmous) does not remember its password. Here we will
+ send him a mail containing a link that will trigger password
+ re-initialisation.'''
+ login = self.REQUEST.get('login').strip()
+ appyTool = self.appy()
+ user = appyTool.search1('User', login=login, noSecurity=True)
+ msg = self.translate('reinit_mail_sent')
+ backUrl = self.REQUEST['HTTP_REFERER']
+ if not user:
+ # Return the message nevertheless. This way, malicious users can't
+ # deduce information about existing users.
+ return self.goto(backUrl, msg)
+ # If login is an email, use it. Else, use user.email instead.
+ email = user.login
+ if not String.EMAIL.match(email):
+ email = user.email
+ if not email:
+ # Impossible to re-initialise the password.
+ return self.goto(backUrl, msg)
+ # Create a temporary file whose name is the user login and whose
+ # content is a generated token.
+ f = file(os.path.join(getOsTempFolder(), login), 'w')
+ token = String().generatePassword()
+ f.write(token)
+ f.close()
+ # Send an email
+ initUrl = '%s/doPasswordReinit?login=%s&token=%s' % \
+ (self.absolute_url(), login, token)
+ subject = self.translate('reinit_password')
+ map = {'url':initUrl, 'siteUrl':self.getSiteUrl()}
+ body= self.translate('reinit_password_body', mapping=map, format='text')
+ sendMail(appyTool, email, subject, body)
+ return self.goto(backUrl, msg)
+
+ def doPasswordReinit(self):
+ '''Performs the password re-initialisation.'''
+ rq = self.REQUEST
+ login = rq['login']
+ token = rq['token']
+ # Check if such token exists in temp folder
+ tokenFile = os.path.join(getOsTempFolder(), login)
+ if os.path.exists(tokenFile):
+ f = file(tokenFile)
+ storedToken = f.read()
+ f.close()
+ if storedToken == token:
+ # Generate a new password for this user
+ appyTool = self.appy()
+ user = appyTool.search1('User', login=login, noSecurity=True)
+ newPassword = user.setPassword()
+ # Send the new password by email
+ email = login
+ if not String.EMAIL.match(email):
+ email = user.email
+ subject = self.translate('new_password')
+ siteUrl = self.getSiteUrl()
+ map = {'password': newPassword, 'siteUrl': siteUrl}
+ body = self.translate('new_password_body', mapping=map,
+ format='text')
+ sendMail(appyTool, email, subject, body)
+ os.remove(tokenFile)
+ return self.goto(siteUrl, self.translate('new_password_sent'))
# ------------------------------------------------------------------------------
diff --git a/gen/po.py b/gen/po.py
index b7906da..62e71d9 100644
--- a/gen/po.py
+++ b/gen/po.py
@@ -136,6 +136,21 @@ class PoMessage:
ENABLE_COOKIES = 'You must enable cookies before you can log in.'
PAGE_PREVIOUS = 'Previous page'
PAGE_NEXT = 'Next page'
+ FORGOT_PASSWORD = 'Forgot password?'
+ ASK_PASSWORD_REINIT = 'Ask new password'
+ REINIT_MAIL_SENT = 'A mail has been sent to you. Please follow the ' \
+ 'instructions from this email.'
+ REINIT_PASSWORD = 'Password re-initialisation'
+ REINIT_PASSWORD_BODY = 'Hello,
A password re-initialisation ' \
+ 'has been requested, tied to this email address, for the website ' \
+ '${siteUrl}. If you are not at the origin of this request, please ' \
+ 'ignore this email. Else, click on the link below to receive a new ' \
+ 'password.