Function viewResetPassword

account.go:1244–1304

(app *App, w http.ResponseWriter, r *http.Request)

}

func viewResetPassword(app *App, w http.ResponseWriter, r *http.Request) error {
	token := r.FormValue("t")
	resetting := false
	var userID int64 = 0
	if token != "" {
		// Show new password page
		userID = app.db.GetUserFromPasswordReset(token)
		if userID == 0 {
			return impart.HTTPError{http.StatusNotFound, ""}
		}
		resetting = true
	}

	if r.Method == http.MethodPost {
		newPass := r.FormValue("new-pass")
		if newPass == "" {
			// Send password reset email
			return handleResetPasswordInit(app, w, r)
		}

		// Do actual password reset
		// Assumes token has been validated above
		err := doAutomatedPasswordChange(app, userID, newPass)
		if err != nil {
			return err
		}
		err = app.db.ConsumePasswordResetToken(token)
		if err != nil {
			log.Error("Couldn't consume token %s for user %d!!! %s", token, userID, err)
		}
		addSessionFlash(app, w, r, "Your password was reset. Now you can log in below.", nil)
		return impart.HTTPError{http.StatusFound, "/login"}
	}

	f, _ := getSessionFlashes(app, w, r, nil)

	// Show reset password page
	d := struct {
		page.StaticPage
		Flashes      []string
		EmailEnabled bool
		CSRFField    template.HTML
		Token        string
		IsResetting  bool
		IsSent       bool
	}{
		StaticPage:   pageForReq(app, r),
		Flashes:      f,
		EmailEnabled: app.cfg.Email.Enabled(),
		CSRFField:    csrf.TemplateField(r),
		Token:        token,
		IsResetting:  resetting,
		IsSent:       r.FormValue("sent") == "1",
	}
	err := pages["reset.tmpl"].ExecuteTemplate(w, "base", d)
	if err != nil {
		log.Error("Unable to render password reset page: %v", err)
		return err