bvandeusenandClaude Opus 5.5
593b583d23
Step #5429 "Reset by email: request, link and new-password page" of milestone 497 "Passwords: change your own, and reset it by email". - Sign-in page: "Forgot your password?" while a mail server is set. - /forgot takes a username or email and answers the same either way; only an active local account with a real address gets mail. Requests count per address on their own throttle, so they never lock out sign-in. - password_resets (migration 0039): a one-time key, stored as its sha256, working for an hour; asking again replaces it. - /reset/<key>: the new password, then signed straight in; every other browser is signed out (sessions_since). Bad keys count as invite keys do. - Email "[Steward] Reset your password", in the account's own zone. - Audited: user.password_reset_requested, user.password_reset_by_email. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
28 lines
1.0 KiB
Python
28 lines
1.0 KiB
Python
from .base import Base
|
|
from .users import User
|
|
from .api_tokens import ApiToken
|
|
from .invites import UserInvite
|
|
from .password_resets import PasswordReset
|
|
from .hosts import Host
|
|
from .monitors import Monitor, MonitorResult, MonitorType
|
|
from .metrics import PluginMetric
|
|
from .alerts import AlertRule, AlertState, AlertEvent, AlertOperator, AlertStateEnum
|
|
from .ansible import AnsibleRun, AnsibleRunStatus
|
|
from .ansible_inventory import AnsibleTarget, AnsibleGroup, ansible_target_groups
|
|
from .ansible_schedule import AnsibleSchedule
|
|
from .settings import AppSetting
|
|
from .dashboard import Dashboard, DashboardWidget, DashboardShareToken
|
|
|
|
__all__ = [
|
|
"Base", "User", "ApiToken", "UserInvite",
|
|
"Host",
|
|
"Monitor", "MonitorResult", "MonitorType",
|
|
"PluginMetric",
|
|
"AlertRule", "AlertState", "AlertEvent", "AlertOperator", "AlertStateEnum",
|
|
"AnsibleRun", "AnsibleRunStatus",
|
|
"AnsibleTarget", "AnsibleGroup", "ansible_target_groups",
|
|
"AnsibleSchedule",
|
|
"AppSetting",
|
|
"Dashboard", "DashboardWidget", "DashboardShareToken",
|
|
]
|