openwisp-users 1.3.0__tar.gz → 1.3.2__tar.gz

{openwisp_users-1.3.0 → openwisp_users-1.3.2}/CHANGES.rst

@@ -1,6 +1,28 @@
 Changelog
 =========
 
+Version 1.3.2 [2026-10-23]
+--------------------------
+
+Bugfixes
+~~~~~~~~
+
+- Restored logo padding on mobile screens
+
+  Rules in `openwisp.css` removed the logo padding on non-admin screens,
+  making it appear cramped.
+
+- Corrected password expiration dates and duplicate notifications `#375
+  <https://github.com/openwisp/openwisp-users/issues/375>`_
+
+Version 1.3.1 [2026-09-09]
+--------------------------
+
+Bugfixes
+~~~~~~~~
+
+- Prevented autocomplete loop without an organization field
+
 Version 1.3.0 [2026-09-02]
 --------------------------
 

{openwisp_users-1.3.0/openwisp_users.egg-info → openwisp_users-1.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: openwisp-users
-Version: 1.3.0
+Version: 1.3.2
 Summary: Provides basic multi-tenancy features for OpenWISP (using the Django web-framework)
 Home-page: http://openwisp.org
 Download-URL: https://github.com/openwisp/openwisp-users/releases

{openwisp_users-1.3.0 → openwisp_users-1.3.2}/openwisp_users/__init__.py

@@ -1,4 +1,4 @@
-VERSION = (1, 3, 0, "final")
+VERSION = (1, 3, 2, "final")
 __version__ = VERSION  # alias
 
 

{openwisp_users-1.3.0 → openwisp_users-1.3.2}/openwisp_users/accounts/static/openwisp-users/accounts/css/non-admin.css

@@ -5,3 +5,8 @@ button,
 form label {
   margin-right: 5px;
 }
+@media (max-width: 768px) {
+  h1#site-name {
+    padding: 0.5rem 0;
+  }
+}

{openwisp_users-1.3.0 → openwisp_users-1.3.2}/openwisp_users/base/models.py

@@ -129,7 +129,7 @@ class AbstractUser(BaseUser):
         return str(pk)
 
     def set_password(self, *args, **kwargs):
-        self.password_updated = timezone.now().date()
+        self.password_updated = localdate()
         return super().set_password(*args, **kwargs)
 
     def has_password_expired(self):
@@ -145,7 +145,7 @@ class AbstractUser(BaseUser):
             )
         else:
             return False
-        return expiry_date < timezone.now().date()
+        return expiry_date < localdate()
 
     def is_member(self, organization):
         return self._get_pk(organization) in self.organizations_dict

{openwisp_users-1.3.0 → openwisp_users-1.3.2}/openwisp_users/static/openwisp-users/js/org-autocomplete.js

@@ -10,6 +10,9 @@
     // Hence, we need to update the value of selected option before
     // submission of form.
     var formElement = $("select#id_organization");
+    if (formElement.length === 0) {
+      return;
+    }
     while (formElement.prop("tagName") !== "FORM") {
       formElement = formElement.parent();
     }

{openwisp_users-1.3.0 → openwisp_users-1.3.2}/openwisp_users/tasks.py

@@ -6,7 +6,7 @@ from django.db.models import Q
 from django.template.loader import render_to_string
 from django.urls import reverse
 from django.utils import translation
-from django.utils.timezone import now, timedelta
+from django.utils.timezone import localdate, timedelta
 from django.utils.translation import gettext_lazy as _
 from swapper import load_model
 
@@ -30,7 +30,7 @@ def password_expiration_email():
     ):
         # The password expiration feature is not enabled
         return
-    expiry_date = now().date() + timedelta(days=7)
+    expiry_date = localdate() + timedelta(days=7)
     query = Q()
     if app_settings.USER_PASSWORD_EXPIRATION:
         query |= Q(
@@ -54,6 +54,9 @@ def password_expiration_email():
             emailaddress__verified=True,
         )
         .filter(query)
+        # a user can own more than one verified email address:
+        # without distinct() the join would send one email per address
+        .distinct()
     )
     email_count = 0
     for user in qs.iterator():

{openwisp_users-1.3.0 → openwisp_users-1.3.2}/openwisp_users/tests/test_models.py

@@ -416,7 +416,7 @@ class TestUsers(TestOrganizationMixin, TestCase):
 
         # User.objects.create_user does not call User.set_password.
         # Therefore, we set the password_updated field manually.
-        User.objects.update(password_updated=now().date())
+        User.objects.update(password_updated=localdate())
         staff_user.refresh_from_db()
         end_user.refresh_from_db()
 
@@ -437,7 +437,7 @@ class TestUsers(TestOrganizationMixin, TestCase):
                 self.assertEqual(end_user.has_password_expired(), False)
 
         with self.subTest("Test password is expired"):
-            User.objects.update(password_updated=now().date() - timedelta(days=180))
+            User.objects.update(password_updated=localdate() - timedelta(days=180))
             staff_user.refresh_from_db()
             end_user.refresh_from_db()
             with (
@@ -459,10 +459,10 @@ class TestUsers(TestOrganizationMixin, TestCase):
     @patch.object(app_settings, "USER_PASSWORD_EXPIRATION", 30)
     @patch.object(app_settings, "STAFF_USER_PASSWORD_EXPIRATION", 90)
     def test_password_expiration_mail(self):
-        user_expiry_date = now().date() - timedelta(
+        user_expiry_date = localdate() - timedelta(
             days=(app_settings.USER_PASSWORD_EXPIRATION - 7)
         )
-        staff_user_expiry_date = now().date() - timedelta(
+        staff_user_expiry_date = localdate() - timedelta(
             days=(app_settings.STAFF_USER_PASSWORD_EXPIRATION - 7)
         )
         staff_user = self._create_operator()
@@ -498,7 +498,7 @@ class TestUsers(TestOrganizationMixin, TestCase):
                 password_updated=user_expiry_date
             )
             password_expiration_email.delay()
-            expected_date = localize((now() + timedelta(days=7)).date())
+            expected_date = localize(localdate() + timedelta(days=7))
             self.assertEqual(len(mail.outbox), 1)
             email = mail.outbox.pop()
             self.assertEqual(email.to, [verified_email_user.email])
@@ -525,7 +525,7 @@ class TestUsers(TestOrganizationMixin, TestCase):
     @patch.object(app_settings, "USER_PASSWORD_EXPIRATION", 30)
     @patch("openwisp_users.utils.sleep")
     def test_password_expiration_mail_sleep(self, mocked_sleep):
-        user_expiry_date = now().date() - timedelta(
+        user_expiry_date = localdate() - timedelta(
             days=(app_settings.USER_PASSWORD_EXPIRATION - 7)
         )
         for i in range(10):
@@ -547,7 +547,7 @@ class TestUsers(TestOrganizationMixin, TestCase):
         self.assertEqual(app_settings.USER_PASSWORD_EXPIRATION, 0)
         self.assertEqual(app_settings.STAFF_USER_PASSWORD_EXPIRATION, 0)
         self._create_user()
-        User.objects.update(password_updated=now().date() - timedelta(days=180))
+        User.objects.update(password_updated=localdate() - timedelta(days=180))
         with patch("openwisp_users.tasks.send_email") as mocked_send_email:
             password_expiration_email.delay()
         mocked_send_email.assert_not_called()
@@ -1195,3 +1195,90 @@ class TestUsers(TestOrganizationMixin, TestCase):
                 expiration_reminder_email,
                 None,
             )
+
+    @patch.object(app_settings, "USER_PASSWORD_EXPIRATION", 30)
+    def test_password_expiration_mail_multiple_verified_emails(self):
+        user = self._create_user()
+        for index in range(2):
+            EmailAddress.objects.create(
+                user=user,
+                email=f"alias{index}@tester.com",
+                verified=True,
+            )
+        User.objects.update(
+            password_updated=localdate()
+            - timedelta(days=app_settings.USER_PASSWORD_EXPIRATION - 7)
+        )
+        password_expiration_email.delay()
+        self.assertEqual(
+            len(mail.outbox),
+            1,
+            msg=(
+                f"Expected 1 password expiry notice, got {len(mail.outbox)}:"
+                " the notice is duplicated once per verified email address"
+                " of the same user"
+            ),
+        )
+        self.assertEqual(mail.outbox[0].to, [user.email])
+
+    @freeze_time("2026-03-29 23:30:00")
+    @override_settings(TIME_ZONE="Europe/Rome")
+    @patch.object(app_settings, "USER_PASSWORD_EXPIRATION", 30)
+    def test_password_expiration_local_date(self):
+        """
+        23:30 UTC is already the next day in Europe/Rome (UTC+2), so password
+        expiration dates must follow the local calendar day.
+        """
+        user = self._create_user()
+
+        with self.subTest("password_updated is stamped with the local date"):
+            user.set_password("tester")
+            self.assertEqual(
+                user.password_updated,
+                localdate(),
+                msg=(
+                    f"Expected password_updated {localdate()} (local date),"
+                    f" got {user.password_updated} (UTC date)"
+                ),
+            )
+
+        expiration = app_settings.USER_PASSWORD_EXPIRATION
+
+        with self.subTest("password is valid on the expiration date"):
+            user.password_updated = localdate() - timedelta(days=expiration)
+            self.assertFalse(
+                user.has_password_expired(),
+                msg="Expected password to remain valid on its expiration date",
+            )
+
+        with self.subTest("password is expired after the expiration date"):
+            user.password_updated = localdate() - timedelta(days=expiration + 1)
+            self.assertTrue(
+                user.has_password_expired(),
+                msg=(
+                    "Expected the password to be expired: it expired on"
+                    f" {user.password_updated + timedelta(days=expiration)},"
+                    f" while the local date is {localdate()}"
+                ),
+            )
+
+    @freeze_time("2026-03-29 23:30:00")
+    @override_settings(TIME_ZONE="Europe/Rome")
+    @patch.object(app_settings, "USER_PASSWORD_EXPIRATION", 30)
+    def test_password_expiration_mail_local_date(self):
+        self._create_user()
+        User.objects.update(
+            password_updated=localdate()
+            - timedelta(days=app_settings.USER_PASSWORD_EXPIRATION - 7)
+        )
+        password_expiration_email.delay()
+        self.assertEqual(
+            len(mail.outbox),
+            1,
+            msg=(
+                f"Expected 1 password expiry notice, got {len(mail.outbox)}:"
+                " the task looks for passwords expiring 7 days after the UTC"
+                f" date ({now().date()}) instead of the local date"
+                f" ({localdate()})"
+            ),
+        )

{openwisp_users-1.3.0 → openwisp_users-1.3.2/openwisp_users.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: openwisp-users
-Version: 1.3.0
+Version: 1.3.2
 Summary: Provides basic multi-tenancy features for OpenWISP (using the Django web-framework)
 Home-page: http://openwisp.org
 Download-URL: https://github.com/openwisp/openwisp-users/releases