django.contrib.auth.tokens.PasswordResetTokenGenerator

class documentation

class PasswordResetTokenGenerator: (source)

View In Hierarchy

Strategy object used to generate and check tokens for the password reset mechanism.

Method __init__ Undocumented
Method check_token Check that a password reset token is correct for a given user.
Method make_token Return a token that can be used once to do a password reset for the given user.
Class Variable key_salt Undocumented
Class Variable secret Undocumented
Class Variable secret_fallbacks Undocumented
Instance Variable algorithm Undocumented
Method _get_fallbacks Undocumented
Method _get_secret Undocumented
Method _make_hash_value Hash the user's primary key, email (if available), and some user state that's sure to change after a password reset to produce a token that is invalidated when it's used: 1. The password field will change upon a password reset (even if the same password is chosen, due to password salting)...
Method _make_token_with_timestamp Undocumented
Method _now Undocumented
Method _num_seconds Undocumented
Method _set_fallbacks Undocumented
Method _set_secret Undocumented
Instance Variable _secret Undocumented
Instance Variable _secret_fallbacks Undocumented
def __init__(self): (source)

Undocumented

def check_token(self, user, token): (source)

Check that a password reset token is correct for a given user.

def make_token(self, user): (source)

Return a token that can be used once to do a password reset for the given user.

key_salt: str = (source)

Undocumented

secret = (source)

Undocumented

secret_fallbacks = (source)

Undocumented

algorithm = (source)

Undocumented

def _get_fallbacks(self): (source)

Undocumented

def _get_secret(self): (source)

Undocumented

def _make_hash_value(self, user, timestamp): (source)

Hash the user's primary key, email (if available), and some user state that's sure to change after a password reset to produce a token that is invalidated when it's used: 1. The password field will change upon a password reset (even if the same password is chosen, due to password salting). 2. The last_login field will usually be updated very shortly after a password reset. Failing those things, settings.PASSWORD_RESET_TIMEOUT eventually invalidates the token. Running this data through salted_hmac() prevents password cracking attempts using the reset token, provided the secret isn't compromised.

def _make_token_with_timestamp(self, user, timestamp, secret): (source)

Undocumented

def _now(self): (source)

Undocumented

def _num_seconds(self, dt): (source)

Undocumented

def _set_fallbacks(self, fallbacks): (source)

Undocumented

def _set_secret(self, secret): (source)

Undocumented

_secret = (source)

Undocumented

_secret_fallbacks = (source)

Undocumented