Produits Entr'ouvert » w.c.s.

def handle_expired_tokens(publisher, **kwargs):

    if 'password' not in get_cfg('identification', {}).get('methods', []):

        return

    now = time.time()

    for token_key in tokens.Token.keys():

        try:

            token = tokens.Token.get(token_key, ignore_migration=True)

        except KeyError:

            continue

        if token.type == 'account-confirmation' and now > token.expiration:

            try:

                account = PasswordAccount.get(token.context['username'])

            except KeyError:

                # no such account, unncessary to keep the token

                token.remove_self()

                continue

            if not account.awaiting_confirmation:

                continue

            user = account.get_user()

            account.remove_self()

            # XXX: theorically the user could have been associated with another

            # account, it is ignored.

            if user:

                user.remove_self()

            token.remove_self()

    get_publisher_class().register_cronjob(CronJob(handle_expired_tokens, minutes=[0], hours=[6]))

-