django-content-studio 1.0.0b13__py3-none-any.whl → 1.0.0b14__py3-none-any.whl

content_studio/__init__.py

@@ -1,5 +1,5 @@
 __title__ = "Django Content Studio"
-__version__ = "1.0.0-beta.13"
+__version__ = "1.0.0-beta.14"
 __author__ = "Leon van der Grient"
 __license__ = "MIT"
 

content_studio/contrib/password_reset/__init__.py

@@ -0,0 +1 @@
+default_app_config = "content_studio.contrib.apps.Config"

content_studio/contrib/password_reset/apps.py

@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class Config(AppConfig):
+    name = "content_studio.contrib.password_reset"
+    verbose_name = "DCS Password Reset"

content_studio/contrib/password_reset/migrations/0001_initial.py

@@ -0,0 +1,52 @@
+# Generated by Django 6.0.1 on 2026-02-04 09:42
+
+import content_studio.contrib.password_reset.models
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = []
+
+    operations = [
+        migrations.CreateModel(
+            name="PasswordResetCode",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                (
+                    "email",
+                    models.EmailField(
+                        editable=False, max_length=255, verbose_name="Email address"
+                    ),
+                ),
+                (
+                    "code",
+                    models.CharField(
+                        default=content_studio.contrib.password_reset.models.generate_code,
+                        editable=False,
+                        max_length=6,
+                        verbose_name="Code",
+                    ),
+                ),
+                (
+                    "created_at",
+                    models.DateTimeField(auto_now_add=True, verbose_name="Created at"),
+                ),
+            ],
+            options={
+                "verbose_name": "Password reset code",
+                "verbose_name_plural": "Password reset codes",
+                "db_table": "dcs_password_reset_code",
+            },
+        ),
+    ]

content_studio/contrib/password_reset/models.py

@@ -0,0 +1,39 @@
+import datetime
+import random
+
+from django.db import models
+from django.utils import timezone
+
+from content_studio.settings import cs_settings
+
+
+def generate_code():
+    return "".join(str(random.randint(0, 9)) for _ in range(6))
+
+
+class PasswordResetCode(models.Model):
+    class Meta:
+        db_table = "dcs_password_reset_code"
+        verbose_name = "Password reset code"
+        verbose_name_plural = "Password reset codes"
+
+    email = models.EmailField(
+        max_length=255, verbose_name="Email address", editable=False
+    )
+
+    code = models.CharField(
+        max_length=6, verbose_name="Code", default=generate_code, editable=False
+    )
+
+    created_at = models.DateTimeField(auto_now_add=True, verbose_name="Created at")
+
+    @property
+    def expired(self):
+        return (
+            self.created_at
+            + datetime.timedelta(minutes=cs_settings.PASSWORD_RESET_EXPIRATION_TIME)
+            < timezone.now()
+        )
+
+    def __str__(self):
+        return self.email

content_studio/contrib/password_reset/serializers.py

@@ -0,0 +1,15 @@
+from rest_framework import serializers
+
+
+class PasswordResetRequestSerializer(serializers.Serializer):
+    email = serializers.EmailField()
+
+
+class CodeValidationSerializer(serializers.Serializer):
+    code = serializers.CharField(max_length=6)
+
+
+class PasswordResetSubmissionSerializer(serializers.Serializer):
+    code = serializers.CharField(max_length=6)
+    email = serializers.EmailField()
+    password = serializers.CharField(min_length=8)

content_studio/contrib/password_reset/urls.py

@@ -0,0 +1,30 @@
+"""
+URL configuration for cms project.
+
+The `urlpatterns` list routes URLs to views. For more information please see:
+    https://docs.djangoproject.com/en/4.2/topics/http/urls/
+Examples:
+Function views
+    1. Add an import:  from my_app import views
+    2. Add a URL to urlpatterns:  path('', views.home, name='home')
+Class-based views
+    1. Add an import:  from other_app.views import Home
+    2. Add a URL to urlpatterns:  path('', Home.as_view(), name='home')
+Including another URLconf
+    1. Import the include() function: from django.urls import include, path
+    2. Add a URL to urlpatterns:  path('blog/', include('blog.urls'))
+"""
+
+from django.urls import path
+
+from .views import (
+    PasswordResetRequestView,
+    PasswordResetSubmissionView,
+    CodeValidationView,
+)
+
+urlpatterns = [
+    path("api/password-reset/request", PasswordResetRequestView.as_view()),
+    path("api/password-reset/submit", PasswordResetSubmissionView.as_view()),
+    path("api/password-reset/code", CodeValidationView.as_view()),
+]

content_studio/contrib/password_reset/views.py

@@ -0,0 +1,118 @@
+from django.contrib.auth import get_user_model
+from django.core.mail import send_mail
+from django.utils.translation import gettext_lazy as _
+from rest_framework import status
+from rest_framework.exceptions import ValidationError
+from rest_framework.permissions import AllowAny
+from rest_framework.response import Response
+from rest_framework.views import APIView
+
+from .models import PasswordResetCode
+from .serializers import (
+    PasswordResetRequestSerializer,
+    CodeValidationSerializer,
+    PasswordResetSubmissionSerializer,
+)
+
+
+class PasswordResetRequestView(APIView):
+    permission_classes = [AllowAny]
+
+    def post(self, request):
+        serializer = PasswordResetRequestSerializer(data=request.data)
+
+        serializer.is_valid(raise_exception=True)
+
+        email = serializer.validated_data["email"]
+
+        # Delete any existing codes for this email.
+        PasswordResetCode.objects.filter(email=email).delete()
+
+        reset = PasswordResetCode.objects.create(email=email)
+
+        try:
+            self.send_email(reset)
+        except Exception as e:
+            reset.delete()
+            print(e)
+
+        return Response(status=status.HTTP_202_ACCEPTED)
+
+    def send_email(self, reset: PasswordResetCode):
+        send_mail(
+            from_email=None,
+            subject=_("Your password reset code"),
+            message=_("Your password reset code is: ") + reset.code,
+            recipient_list=[reset.email],
+        )
+
+
+class CodeValidationView(APIView):
+    permission_classes = [AllowAny]
+
+    def post(self, request):
+        serializer = CodeValidationSerializer(data=request.data)
+
+        serializer.is_valid(raise_exception=True)
+
+        code = serializer.validated_data["code"]
+
+        existing = PasswordResetCode.objects.filter(code=code).first()
+
+        if not existing:
+            raise ValidationError("Invalid code.")
+
+        if existing.expired:
+            existing.delete()
+            raise ValidationError("Expired code.")
+
+        return Response(status=status.HTTP_204_NO_CONTENT)
+
+
+class PasswordResetSubmissionView(APIView):
+    permission_classes = [AllowAny]
+
+    def post(self, request):
+        serializer = PasswordResetSubmissionSerializer(data=request.data)
+
+        serializer.is_valid(raise_exception=True)
+
+        code = serializer.validated_data["code"]
+        email = serializer.validated_data["email"]
+        password = serializer.validated_data["password"]
+
+        existing = PasswordResetCode.objects.filter(code=code, email=email).first()
+
+        if not existing:
+            raise ValidationError("Invalid code.")
+
+        if existing.expired:
+            existing.delete()
+            raise ValidationError("Expired code.")
+
+        user_model = get_user_model()
+        user = user_model.objects.filter(email=email).first()
+
+        if not user:
+            raise ValidationError("Invalid email.")
+
+        user.set_password(password)
+
+        existing.delete()
+
+        try:
+            self.send_email(email)
+        except Exception as e:
+            print(e)
+
+        return Response(status=status.HTTP_204_NO_CONTENT)
+
+    def send_email(self, email):
+        send_mail(
+            from_email=None,
+            subject=_("Your password has been reset"),
+            message=_(
+                "Your password has been reset. If you did not do this, please contact your administrator."
+            ),
+            recipient_list=[email],
+        )

content_studio/locale/nl/LC_MESSAGES/django.po

@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-02-03 20:22+0100\n"
+"POT-Creation-Date: 2026-02-04 11:15+0100\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,14 +17,33 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
-#: content_studio/dashboard/scheduled_tasks.py:23
+
+#: contrib/password_reset/views.py:44
+msgid "Your password reset code"
+msgstr "Je wachtwoord-herstelcode"
+
+#: contrib/password_reset/views.py:45
+msgid "Your password reset code is: "
+msgstr "Je wachtwoord-herstelcode is: "
+
+#: contrib/password_reset/views.py:100
+msgid "Your password has been reset"
+msgstr "Je wachtwoord is gewijzigd"
+
+#: contrib/password_reset/views.py:102
+msgid ""
+"Your password has been reset. If you did not do this, please contact your "
+"administrator."
+msgstr "Je wachtwoord is gewijzigd. Neem contact op met je administrator als jij dit niet hebt gedaan."
+
+#: dashboard/scheduled_tasks.py:23
 msgid "Scheduled tasks"
 msgstr "Geplande taken"
 
-#: content_studio/dashboard/scheduled_tasks.py:26
+#: dashboard/scheduled_tasks.py:26
 msgid "Monitor and manage automated tasks"
 msgstr "Monitor en beheer geautomatiseerde taken"
 
-#: content_studio/views.py:183
+#: views.py:188
 msgid "Content"
 msgstr "Content"

content_studio/login_backends/username_password.py

@@ -64,19 +64,3 @@ class UsernamePasswordBackend:
         Returns the user if successful, None otherwise.
         """
         return authenticate(username=username, password=password)
-
-    def request_password_reset(self, username):
-        """
-        Sends a password reset email.
-        """
-        raise NotImplemented(
-            "You need to implement a method for sending a password reset token."
-        )
-
-    def complete_password_reset(self, reset_token, new_password):
-        """
-        Sets the new password based on the reset token.
-        """
-        raise NotImplemented(
-            "You need to implement a method for validating a reset token and setting a new password."
-        )

content_studio/settings.py

@@ -32,6 +32,7 @@ DEFAULTS = {
     "MEDIA_LIBRARY_MODEL": None,
     "MEDIA_LIBRARY_FOLDER_MODEL": None,
     "TENANT_MODEL": None,
+    "PASSWORD_RESET_EXPIRATION_TIME": 10,
 }