🔑 {intro}:'
f'
{key}
'
"Save it somewhere safe (screenshot or notes). It is the only way to reset your password yourself "
"if you forget it. It is shown only once.
")
def reset_with_key(email, key, new_pw, confirm):
"""Returns (user, new_key, error)."""
email = (email or "").strip().lower()
if not _EMAIL_RE.match(email):
return None, None, "Please enter your account email."
if not (key or "").strip():
return None, None, "Please enter your recovery key."
if len(new_pw or "") < 8:
return None, None, "New password must be at least 8 characters."
if new_pw != confirm:
return None, None, "Passwords do not match."
now = time.time()
with _pw_db() as con:
con.execute("DELETE FROM reset_fails WHERE ts < ?", (now - 3600,))
fails = con.execute("SELECT COUNT(*) FROM reset_fails WHERE email=?", (email,)).fetchone()[0]
if fails >= MAX_KEY_FAILS:
return None, None, "Too many wrong attempts. Please wait an hour, or ask the admin to reset it."
row = con.execute("SELECT name, active, recovery_hash FROM users WHERE email=?", (email,)).fetchone()
if not row or not row[2] or not hmac.compare_digest(row[2], _key_hash(email, key)):
con.execute("INSERT INTO reset_fails (email, ts) VALUES (?,?)", (email, now))
return None, None, "Email or recovery key is not correct."
if row[1] == 0:
return None, None, "This account has been disabled. Please contact CS Software Solutions."
salt = secrets.token_hex(16)
con.execute("UPDATE users SET salt=?, pw=?, last_login=CURRENT_TIMESTAMP WHERE email=?",
(salt, _hash(new_pw, salt), email))
con.execute("DELETE FROM reset_fails WHERE email=?", (email,))
con.execute("UPDATE reset_requests SET status='done' WHERE email=? AND status='open'", (email,))
return {"email": email, "name": row[0]}, new_recovery_key(email), None
def change_password(user, old_pw, new_pw, confirm):
"""Signed-in user changes their password. Returns (ok, message)."""
if not user:
return False, "Please sign in first."
_, err = check_user(user["email"], old_pw)
if err:
return False, "Current password is not correct."
if len(new_pw or "") < 8:
return False, "New password must be at least 8 characters."
if new_pw != confirm:
return False, "New passwords do not match."
salt = secrets.token_hex(16)
with _db() as con:
con.execute("UPDATE users SET salt=?, pw=? WHERE email=?", (salt, _hash(new_pw, salt), user["email"]))
request_sync()
return True, "Password changed."
def request_admin_reset(email, contact):
"""User without a recovery key asks the admin for a reset. Neutral answer either way."""
email, contact = (email or "").strip().lower(), (contact or "").strip()[:120]
if not _EMAIL_RE.match(email):
return False, "Please enter your account email."
if not contact:
return False, "Please add a WhatsApp / phone number so the admin can send you a temporary password."
with _pw_db() as con:
known = con.execute("SELECT 1 FROM users WHERE email=?", (email,)).fetchone()
dup = con.execute("SELECT 1 FROM reset_requests WHERE email=? AND status='open'", (email,)).fetchone()
if known and not dup:
con.execute("INSERT INTO reset_requests (email, contact) VALUES (?,?)", (email, contact))
request_sync()
return True, ("Request sent. If an account exists for this email, the admin will contact you on "
f"{html.escape(contact)} with a temporary password (usually within a few hours).")
RESET_REQ_COLS = ["When (UTC)", "Email", "Contact", "Status"]
def admin_reset_requests(user):
_need_admin(user)
with _pw_db() as con:
rows = con.execute("SELECT ts, email, contact, status FROM reset_requests "
"ORDER BY status='done', id DESC LIMIT 100").fetchall()
return [[(r[0] or "")[:16], r[1], r[2], r[3]] for r in rows]
# ---------------------------------------------------------------------------
# Forgot password by email: 6-digit code (15 min, 5 tries, max 3 codes per hour). Works only when
# email is configured (mailer.ENABLED); the recovery key and admin request above always work.
# ---------------------------------------------------------------------------
RESET_MINUTES = 15
def _code_db():
con = _pw_db()
con.execute("CREATE TABLE IF NOT EXISTS reset_codes (email TEXT, code_hash TEXT, expires REAL, "
"attempts INTEGER DEFAULT 0, created REAL)")
return con
# Sign-up with a confirmed email: the account is created only after the 6-digit code sent to the address is entered
# (anyone could otherwise sign up with someone else's address). Off when email is not set up (sign-up then works as
# before) or with SIGNUP_VERIFY=0.
SIGNUP_VERIFY = os.getenv("SIGNUP_VERIFY", "1") != "0"
def _signup_db():
con = _pw_db()
con.execute("CREATE TABLE IF NOT EXISTS signup_codes (email TEXT, name TEXT, salt TEXT, pw TEXT, code_hash TEXT, "
"expires REAL, attempts INTEGER DEFAULT 0, created REAL)")
return con
def verify_signups():
import mailer as M
return SIGNUP_VERIFY and M.ENABLED
def start_signup(name, email, password, confirm):
"""Checks the form and emails a code. Returns (ok, message); nothing is created yet."""
import mailer as M
name, email = (name or "").strip(), (email or "").strip().lower()
if not name:
return False, "Please enter your name."
if not _EMAIL_RE.match(email):
return False, "Please enter a valid email address."
if len(password or "") < 8:
return False, "Password must be at least 8 characters."
if password != confirm:
return False, "Passwords do not match."
now = time.time()
with _signup_db() as con:
if con.execute("SELECT 1 FROM users WHERE email=?", (email,)).fetchone():
return False, "An account with this email already exists. Please log in."
if con.execute("SELECT COUNT(*) FROM signup_codes WHERE email=? AND created > ?",
(email, now - 3600)).fetchone()[0] >= 3:
return False, "Too many sign-up codes for this address. Please wait an hour and try again."
code = f"{secrets.randbelow(10 ** 6):06d}"
salt = secrets.token_hex(16)
con.execute("INSERT INTO signup_codes (email, name, salt, pw, code_hash, expires, created) VALUES "
"(?,?,?,?,?,?,?)", (email, name, salt, _hash(password, salt),
hashlib.sha256(f"signup:{email}:{code}".encode()).hexdigest(),
now + RESET_MINUTES * 60, now))
con.execute("DELETE FROM signup_codes WHERE expires < ?", (now - 86400,))
ok, _ = M.send_signup_code(email, name, code, RESET_MINUTES)
if not ok:
return False, "We could not send the email right now. Please try again in a few minutes."
return True, (f"We have sent a 6-digit code to