Produits Entr'ouvert » Authentic 2

from django.contrib.auth import forms as auth_forms

from django.core.exceptions import ValidationError

from django.forms import Form

from django import forms

from django.utils.translation import ugettext_lazy as _

class PasswordResetForm(forms.Form):

    next_url = forms.CharField(widget=forms.HiddenInput, required=False)

    def save(self):

        """

        Generates a one-use only link for resetting password and sends to the

        user.

        """

        users = get_user_queryset()

        for user in active_users:

            # we don't set the password to a random string, as some users should not have

            # a password

                set_random_password=set_random_password,

                next_url=self.cleaned_data.get('next_url'))

        if not active_users:

class PasswordResetMixin(Form):

    label = _('password reset failure')

    @classmethod

    @classmethod

    def get_message(cls, event, context):

        if email:

        return super().get_message(event, context)

msgstr ""

"Project-Id-Version: Authentic\n"

"Report-Msgid-Bugs-To: \n"

"PO-Revision-Date: 2020-10-13 11:25+0200\n"

"Last-Translator: Mikaël Ates <mates@entrouvert.com>\n"

"Language-Team: None\n"

"Content-Transfer-Encoding: 8bit\n"

"Plural-Forms: nplurals=2; plural=n>1;\n"

#: src/authentic2/forms/registration.py:40 src/authentic2/manager/forms.py:644

#: src/authentic2/manager/templates/authentic2/manager/user_create_registration_email_body.txt:4

#: src/authentic2/saml/models.py:134

msgid "The image is not valid"

msgstr "L’image n’est pas valide"

msgid "New password"

msgstr "Nouveau mot de passe"

msgid "New password confirmation"

msgstr "Confirmation du nouveau mot de passe"

msgid "New password must differ from old password"

msgstr "Le nouveau mot de passe doit être différent de l’ancien."

msgid "Old password"

msgstr "Ancien mot de passe"

#: src/authentic2/journal_event_types.py:182

#, python-format

msgstr ""

#: src/authentic2/journal_event_types.py:188

msgid "password change"

msgstr "Déconnecté"

#: src/authentic2/templates/registration/password_change_done.html:9

msgid "Password changed"

msgstr "Mot de passe modifié"

msgstr "Instructions de réinitialisation du mot de passe"

#: src/authentic2/templates/registration/password_reset_instructions.html:10

msgid ""

"\n"

"    "

msgstr ""

"\n"

"    "

msgid ""

"\n"

"    Follow the instructions in this email in order to choose a new "

"de passe.\n"

"    "

#: src/authentic2/templates/registration/registration_complete.html:23

msgid ""

"\n"

"    également être considéré comme un pourriel (spam) : n’oubliez pas\n"

"    de regarder dans votre dossier « courriers indésirables ».        "

#, python-format

msgid ""

"\n"

"    puis recommencez la procédure de réinitialisation du mot de passe.\n"

"    "

msgid "Back to login"

msgstr "Retour à la page de connexion"

#: src/authentic2/templates/registration/registration_completion_choose.html:5

#: src/authentic2/templates/registration/registration_completion_form.html:5

#: src/authentic2/templates/registration/registration_completion_form.html:10

msgid "Registration"

msgstr "Création d’un compte"

"Cette page est périmée car vous vous êtes connecté entretemps; nous l’avons "

"rechargée pour vous."

msgid "Password Reset"

msgstr "Réinitialisation du mot de passe"

msgid ""

msgstr ""

msgid ""

"Multiple emails have already been sent to this address. Further attempts are "

"blocked, please check your spam folder or try again later."

"envois sont bloqués, vous devriez vérifier votre dossier d’indésirables "

"(spams, pourriels) ou réessayer plus tard."

msgid ""

"Multiple password reset attempts have already been made from this IP "

"address. No further email will be sent, please check your spam folder or try "

"devriez vérifier votre dossier d’indésirables (spams, pourriels) ou "

"réessayer plus tard."

msgid "Password reset token is unknown or expired"

msgstr "Le jeton de réinitialisation de mot de passe est inconnu ou expiré"

msgid "Password reset token is invalid"

msgstr "Le jeton de réinitialisation de mot de passe est invalide"

msgid "User not found"

msgstr "Utilisateur introuvable"

msgid ""

"It's not possible to reset your password. Please contact an administrator."

msgstr ""

"Votre mot de passe n’a pas pu être réinitialisé. Veuillez contacter votre "

"administrateur."

msgid "Enter new password"

msgstr "Entrez un nouveau mot de passe"

msgid ""

"Multiple registration attempts have already been made from this IP address. "

"No further email will be sent, please check your spam folder or try again "

"vérifier votre dossier d’indésirables (spams, pourriels) ou réessayer plus "

"tard."

msgid "Your activation key is unknown or expired"

msgstr "Votre clé d’activation est inconnue ou a expiré"

msgid "Activation failed"

msgstr "Échec à l’activation du compte"

msgid "Request account deletion"

msgstr "Demande de suppression de compte"

msgid ""

"An account deletion validation email has been sent to your email address."

msgstr ""

"Un message pour valider la suppression du compte a été envoyé à votre "

"adresse électronique."

msgid "Confirm account deletion"

msgstr "Confirmation de la suppression du compte"

msgid "This account has previously been deleted."

msgstr "Ce compte a déjà été supprimé."

msgid "This account is inactive, it cannot be deleted."

msgstr "Ce compte est désactivé, il ne peut plus être supprimé."

msgid "The account deletion request is too old, try again"

msgstr "La demande de suppression de compte est expirée."

msgid "The account deletion request is invalid, try again"

msgstr "La demande de suppression de compte n’est pas valide."

msgid "The account deletion request was not on this site, try again"

msgstr ""

"Votre demande de suppression de compte vient d’un autre site que celui-ci."

msgid "Deletion performed."

msgstr "Suppression effectuée."

msgid "Password Change"

msgstr "Changement de mot de passe"

msgid "Password change is forbidden"

msgstr "Changement de mot de passe interdit"

msgid "Consent Management"

msgstr "Gestion des autorisations"

{% block content %}

  <p><strong>

    {% endblocktrans %}

  </strong></p>

  <p><strong>

        user.save()

    lifetime = settings.PASSWORD_RESET_TIMEOUT_DAYS * 3600 * 24

    # invalidate any token associated with this user

    reset_url = make_url(

        'password_reset_confirm',

        kwargs={'token': token.uuid_b64url},

        return ctx

    def form_valid(self, form):

        # if an email has already been sent, warn once before allowing resend

        token = models.Token.objects.filter(

        ).exists()

        resend_key = 'pw-reset-allow-resend'

        if app_settings.A2_TOKEN_EXISTS_WARNING and token and not self.request.session.get(resend_key):

            self.request.session[resend_key] = True

            form.add_error(

            )

            return self.form_invalid(form)

        self.request.session[resend_key] = False

                          rate=app_settings.A2_EMAILS_ADDRESS_RATELIMIT, increment=True):

            form.add_error(

                _('Multiple emails have already been sent to this address. Further attempts are '

                  'blocked, please check your spam folder or try again later.')

            )

            return self.form_invalid(form)

                          rate=app_settings.A2_EMAILS_IP_RATELIMIT, increment=True):

            form.add_error(

                _('Multiple password reset attempts have already been made from this IP address. No '

                  'further email will be sent, please check your spam folder or try again later.')

            )

            return self.form_invalid(form)

        form.save()

        return super(PasswordResetView, self).form_valid(form)

password_reset = PasswordResetView.as_view()

    # No FC account, forbidden to set a password

    response = app.get('/login/')

    response = response.click('Reset it!').maybe_follow()

    assert len(mailoutbox) == 0

    response = response.form.submit()

    assert len(mailoutbox) == 1

    models.FcAccount.objects.create(user=user, sub='xxx', token='aaa')

    response = app.get('/login/')

    response = response.click('Reset it!').maybe_follow()

    assert len(mailoutbox) == 1

    response = response.form.submit()

    assert len(mailoutbox) == 2

    else:

        response = response.maybe_follow()

    response = response.click('Reset it!')

    assert len(mail.outbox) == 0

    response = response.form.submit().maybe_follow()

    assert len(mail.outbox) == 1

    utils.assert_event('user.password.reset', user=simple_user, session=app.session)

    url = reverse('password_reset')

    resp = app.get(url, status=200)

    assert len(mailoutbox) == 0

    settings.DEFAULT_FROM_EMAIL = 'show only addr <noreply@example.net>'

    resp = resp.form.submit()

    utils.assert_event('user.password.reset.request', user=simple_user, email=simple_user.email)

    assert resp['Location'].endswith('/instructions/')

    resp = resp.follow()

    assert '"noreply@example.net"' in resp.text

    assert 'show only addr' not in resp.text

    assert len(mailoutbox) == 1

    url = reverse('password_reset')

    resp = app.get(url, status=200)

    assert len(mailoutbox) == 0

    resp = resp.form.submit()

    assert len(mailoutbox) == 0

    url = reverse('password_reset')

    resp = app.get(url, status=200)

    assert len(mailoutbox) == 0

    resp = resp.form.submit()

    assert len(mailoutbox) == 0

    settings.A2_EMAILS_ADDRESS_RATELIMIT = '3/d'

    users = [User.objects.create(email='test%s@test.com' % i) for i in range(8)]

    # reach email limit

    for _ in range(3):

        response = app.get(reverse(view_name))

        response = response.form.submit()

    assert len(mailoutbox) == 3

    response = app.get(reverse(view_name))

    response = response.form.submit()

    assert len(mailoutbox) == 3

    assert 'try again later' in response.text

    if view_name == 'password_reset':

    # reach ip limit

    for i in range(7):

        response = app.get(reverse(view_name))

        response = response.form.submit()

    assert len(mailoutbox) == 10

    response = app.get(reverse(view_name))

    response = response.form.submit()

    assert len(mailoutbox) == 10

    assert 'try again later' in response.text

    # ip ratelimits are lifted after an hour

    freezer.tick(datetime.timedelta(hours=1))

    response = app.get(reverse(view_name))

    response = response.form.submit()

    assert len(mailoutbox) == 11

    # email ratelimits are lifted after a day

    response = app.get(reverse(view_name))

    response = response.form.submit()

    assert len(mailoutbox) == 11

    assert 'try again later' in response.text

    freezer.tick(datetime.timedelta(days=1))

    response = app.get(reverse(view_name))

    response = response.form.submit()

    assert len(mailoutbox) == 12

def test_views_email_token_resend(app, simple_user, settings, mailoutbox, view_name):

    settings.A2_TOKEN_EXISTS_WARNING = True

    response = app.get(reverse(view_name))

    response = response.form.submit()

    assert len(mailoutbox) == 1

    # warn user token has already been sent

    response = app.get(reverse(view_name))

    response = response.form.submit()

    assert 'email has already been sent' in response.text

    assert len(mailoutbox) == 1