a hy2 @s8ddlmZmZmZmZddlmZddlmZm Z ddl Z ddl Z ddl Z ddl mZmZddlZddlZddlZddlmZddlmZddlZddlZddlmZmZmZdd lmZdd l m!Z!dd l"m#Z#dd l$m%Z%dd l&m'Z'ddlmZm Z m(Z(eZ)ee)Z*ej+ej,dde-e.Z/eddgdZ0eddZ1e!dgdddZ2GdddeZ3d4ddZ4d5d d!Z5d"d#Z6e0j7d$ed%ed&d'd(Z8e0j9d$ed%ed)ed)ed)fee:e:e:d*d+d,Z;e07d-eedS)6) APIRouterFormRequestQuery)Jinja2Templates) BaseModelfield_validatorN) HTMLResponseRedirectResponse)MIMEText) MIMEMultipart)get_pingconf_vars open_mysqlget_mysql_creds)contextmanager) CryptContext) parseaddr)Optional)HTTP_302_FOUND)rrmodel_validatorz)%(asctime)s - %(levelname)s - %(message)s)levelformatz/resetpwZresetpw)prefixtags templates) directorybcryptauto2b)schemes deprecatedZ bcrypt__identc@sLeZdZUeed<eed<eed<ededdZedddd Z d S) ResetForm identifiercaptcha captcha_codecCs|r |std|S)NzUsername or email is required)strip ValueError)clsvr)*/wd/v2025.freedom4um.com/routes/resetpw.pyvalidate_identifier,s zResetForm.validate_identifierafter)modecCs,|j}|j}||kr(td|S)NzIncorrect CAPTCHA input)r#r%lowerr$r&)selfZ captcha_normZ code_normr)r)r*validate_captcha3s  zResetForm.validate_captchaN) __name__ __module__ __qualname__str__annotations__r classmethodr+rr0r)r)r)r*r!'s  r!cs(tjtjdfddt|DS)Nc3s|]}tVqdSNrandomchoice.0_charsr)r* =z(generate_captcha_code..string ascii_lettersdigitsjoinrangelengthr)r@r*generate_captcha_code;s rLcs(tjtjdfddt|DS)Nr8c3s|]}tVqdSr9r:r=r@r)r*rBBrCz&generate_reset_code..rDrJr)r@r*generate_reset_code@s rNc Csddtdd|d|}dtdd|d|d tdd }d tdd |d |dtdd }td}tdd|d<dtd|d<||d<t|d}t|d} |||| z^ttdd(} | |d|g|Wdn1s0Yt d|Wn>t y^} z$t d|d| WYd} ~ n d} ~ 00dS)Nzhttps:// HomeURLDomainz/resetpw/resetpwconfirm?id=z&code=z-You have requested a password reset for your SiteNamez# account associated with username 'z@'. Please reset your password by clicking the following link: zW If you did not request this reset, please disregard this message. Best regards, The z Team a

Password Reset Request

You have requested a password reset for your z3 account associated with username zh.

Please reset your password by clicking the link below:

Reset Password

If you did not request this, please disregard this email.

Best regards,
The z# Team

alternativez Password ResetSubjectznoreply@FromToplainhtml OutMailServerzReset email sent to zFailed to send reset email to z: ) PingConfr r attachsmtplibSMTPsendmail as_stringloggerdebug Exceptionerror) email handle_id reset_codeusernameZ reset_urltextrVmsgZpart1Zpart2serverer)r)r*send_reset_emailEsD     8rk/)response_class)requestcs6t}||jd<td|td|d|idS)Nr$z"Generated CAPTCHA code for reset: resetpw.htmlr8rnr"r$errors)rLsessionr_r`rTemplateResponse)rnr$r)r)r* get_resetpws rt.)rnr"r#r$c si}d|i}td|zt|||dWnJtyx}z2|D]}|dd}|d||<qFWYd}~n d}~00|jd} |} | r| nd} td | d | d | | krd |d <|rt } | |jd<t j d||d| |dddSd} d}d}z8t t }|jdd}d|vrd|d|f|}|r|d} |d}|d}n4|d|f|}|r|d} |d}|d}| sd|d<t } | |jd<t j d||d| |dddWdWSt}|d|| f|td| t|| ||Wdn1s60YWnxtjjtfy}zVtd|t||d<t } | |jd<t j d||d| |dddWYd}~Sd}~00t j d|td ddS)!Nr"zReceived reset form data: )r"r#r$locrrhr$r8zCAPTCHA comparison: submitted='z ', stored=''z*Incorrect CAPTCHA input (case-insensitive)r#rorp status_codeT dictionary@zRSELECT HandleID, Email, Handle FROM Handles WHERE Email = %s AND StatusCode != 'D'HandleIDZEmailHandlezSSELECT HandleID, Email, Handle FROM Handles WHERE Handle = %s AND StatusCode != 'D'z4No account found with this username or email addressz5UPDATE Handles SET ResetCode = %s WHERE HandleID = %sz#Reset code generated for HandleID: zError during reset: databasezresetpw_success.html)rnrY)r_r`r!r&rqrrgetr%r.rLrrsr mysql_credscursorexecutefetchonerNcommitrkmysql connectorErrorrarbr4rY)rnr"r#r$rq form_datarjrbfieldZstored_captchaZsubmitted_captchaZstored_captcha_normZnew_captcha_coderdrcrfconnrrowrer)r)r* post_resetpws   $          2   rz/resetpwconfirm)rnidcodec s|r|stdtdSzttj}|jdd}|d||f|}|sdtdtdWdWS|d|f|Wdn1s0YWnHtj j t fy}z(t d|tdtdWYd}~Sd}~00td||d d id S) Nz/resetpw?error=invalidurlryTrzzdSELECT HandleID, ResetCode FROM Handles WHERE HandleID = %s AND ResetCode = %s AND StatusCode != 'D'z7UPDATE Handles SET ResetCode = NULL WHERE HandleID = %sz Error validating reset confirm: resetpwconfirm.htmlr8rnrdpasswordconfirm_passwordrq)r rrrrrrrrrrrar_rbrrs)rnrrrrrrjr)r)r*get_resetpw_confirm s4   *"r)rnrdrrr#r$c sLi}||d}td|t|dkr2d|d<||krBd|d<|rjtjd|||d|d|d d d SzfttJ}|} t |} | d | |f| td |Wdn1s0YWnnt j jtfy>} zLtd| t| |d<tjd|||d|d|d d d WYd} ~ Sd} ~ 00tdtdS)N)rrz/Received reset confirm form data for HandleID: r7z+Password must be at least 6 characters longrzPasswords do not matchrrrrwrxzFUPDATE Handles SET Password = %s, ResetCode = NULL WHERE HandleID = %sz(Password reset successful for HandleID: zError updating password: rz/logoutr)r_r`lenrrsrrr pwd_contexthashrrrrrrarbr4r r) rnrdrrr#r$rqrrrZhashed_passwordrjr)r)r*post_resetpw_confirm0sX     2  r)r7)rM)?fastapirrrrfastapi.templatingrpydanticrrrer;rEstarlette.responsesr r mysql.connectorr configparserr[email.mime.textr Zemail.mime.multipartr loggingosutils.pingdatar rr contextlibrpasslib.contextr email.utilsrtypingrZstarlette.statusrrrYr basicConfigDEBUG getLoggerr1r_routerrrr!rLrNrkrrtpostr4rintrrr)r)r)r*s|            <  z#