django-password-reset

django-password-reset copied to clipboard

I just installed the app for my project and i am figuring out how it works, but can't render a custom template and i keep getting template does not exist...

JuliRash

Tests are ok.

alexsilva

Hi, as can i test on my installation, after changing my password with the e-mail link, i can till change again the password using the same link.

mmaridev

Hi, brutasse. I wrote a gettext translation of your app in Italian language. I attach them. Greetings [it.zip](https://github.com/brutasse/django-password-reset/files/1114668/it.zip)

mmaridev

password validation support

1

It'd be good to support [password-validation](https://docs.djangoproject.com/en/1.9/topics/auth/passwords/#password-validation) added in Django 1.9. It's currently possible to reset passwords to one char (e.g. `a`), common passwords (e.g. `abc123`), and the username (e.g. username...

g-k

Since username is publicly available and some users just "try" to recover passwords of other users, is there a way I could reset by email only?

BojanKogoj

I tried use it on Django 1.10.2 with python 3.5. It's not working when i use namespace in my root url. For example : ``` url(r'^my_apps/', include('my_apps.urls',namespace='app1')), ``` So I...

ariadi

reset links aren't invalidated after they are used

2

As far as I can tell, password reset links aren't invalidated or expired after they are used:  The reset token is equivalent to a password since it allows anyone...

g-k

i want use customized template for password recovery i use url(r"^accounts/password",include("password_reset.urls"), but i can't pass email_template_name for text of recovery to this line {email_template_name:"register/recovery_mail.txt"} not working

molavy

Account enumeration vulnerability

1

When filling in the username/email field, if the specified user doesn't exist, then it will respond with "Sorry, this user doesn't exist." allowing would-be attackers to discover usernames and email...

karma0