how to create reset link

[puraminy]

Hello,

Currently, I don't want the whole functionality of this package which is a bit complex for me. I just want to send to the user a link by which he can reset his password, I want the link and a form to reset. Do you have a minimal example for it?

[jwag956]

Almost all functionality from Flask-Security is optional - if you only set SECURITY_RECOVERABLE - you will have just a /login endpoint and a /reset endpoint.

If you don't want to use the FS package at all - look at the itsdangerous package - that is what FS uses to create the link - and as the data in the link put in some user identifier...

[puraminy]

Thank you very much, I already tried itsdangerous package to create the link. Since my website is in Persian and I have my own messages in Persian for email and etc, I implemented the email part too, unless your package support this part too.

I mean if I use that setting should I implement reset endpoint and if yes, can you provide an small example of it?

[jwag956]

Flask-Security supports localizing all messages and templates - there are already many languages included in the package.

[puraminy]

Thanks, yes, now I am reading those documents and realized it. I'm implementing your basic examples ....

[jwag956]

You probably missed the line: fsqla.FsModels.set_db_info(db) in your main app.

[puraminy]

I got it running but after introducing User and Role models. However I already had a Users model (please note it is plural and also had other fields), if I drive it from fsqla.FsUserMixin it gives some errors like lacking of a relationship with roles, etc. I would like to know how can I use my current defined model?

[puraminy]

The username was provided in the code above, if I put an assertion before the last line (commit),

        assert False, reqform
        user = Users(**reqform, logins=1)
        db.session.add(user)
        db.session.commit()

it gives:

AssertionError: {'csrf_token': 'IjQ0NDMyNjk3MDM3YTNhODFhYzA2YTZiZGI4MjgwOTUwODcyMTlkZjMi.YtWHtg.rThpLYJr3PudYRItHc4FTyU1KsQ', 'username': '3149091578', 'mobile': '9133923475', 'email': '[email protected]', 'password': '0123456789', 'register': ''}

Did you noted my register code? Should I change it? It was working, I am now confused...

[jwag956]

So if you look at the SQL error - NONE of your parameters have been set - I would print out the 'user' variable. If you show your models file (especially the Users model) I can take a look.
Hopefully you have an IDE such as PyCharm which would let you quickly pop in the debugger and trace out what is happening.

[puraminy]

These are my models that I have adopted based on comments above. yes if I assert user it's None.
I use vim editor and doesn't have IDE

from flask_security import Security, SQLAlchemyUserDatastore, \
    UserMixin, RoleMixin, auth_required 
    
roles_users = db.Table('roles_users',
    db.Column('user_id', db.Integer(), db.ForeignKey('Users.id')),
    db.Column('role_id', db.Integer(), db.ForeignKey('role.id')))
  
class Role(db.Model, RoleMixin):
  id = db.Column(db.Integer(), primary_key=True)
  name = db.Column(db.String(80), unique=True)
  description = db.Column(db.String(255))
  
class Users(db.Model, UserMixin):
    __tablename__ = 'Users'
    __table_args__ = {'mysql_engine':'InnoDB','mysql_charset':'utf8','mysql_collate':'utf8_general_ci'} 
    id = db.Column(db.Integer, primary_key=True)
    email = col(db.String(64),"ﭗﺴﺗ ﺎﻠﮑﺗﺭﻮﻨﯿﮑﯾ", unique=False)
    email.info["ltr"] = True

    username = col(db.String(64),"ﺶﻣﺍﺮﻫ ﻢﻠﯾ", unique=True, nullable=False)
    password = db.Column(db.String(255))
    active = db.Column(db.Boolean())
    fs_uniquifier = db.Column(db.String(255), unique=True, nullable=False)
    confirmed_at = db.Column(db.DateTime())
    roles = db.relationship('Role', secondary=roles_users,
                            backref=db.backref('users', lazy='dynamic'))
    tf_phone_number = db.Column(db.String(128), nullable=True)
    tf_primary_method = db.Column(db.String(64), nullable=True)
    tf_totp_secret = db.Column(db.String(255), nullable=True)

    failed_logins = col(db.Integer, default=0)
    logins = col(db.Integer, default=0)
    mobile = col(db.String(64),"ﺖﻠﻔﻧ ﻪﻣﺭﺎﻫ", unique=False, nullable=False)
    image = col(db.String(50),
            default="/static/assets/img/anon-user.jpg",
            unique=False)
    cover = col(db.String(50), default="", unique=False)
    def __init__(self, **kwargs):
        for property, value in kwargs.items():
            # depending on whether value is an iterable or not, we must
            # unpack it's value (when **kwargs is request.form, some values
            # will be a 1-element list)
            if hasattr(value, '__iter__') and not isinstance(value, str):
                # the ,= unpack of a singleton fails PEP8 (travis flake8 test)
                value = value[0]

            #if property == 'password':
            #    value = hash_pass(value)  # we need bytes here (not plain str)
    def __repr__(self):
        return str(self.username)


                                                                          103

[jwag956]

your init isn't initializing properties that AREN'T iterables.

I strongly suggest you download and use the community version of PyCharm.

[puraminy]

Thanks, now I reverted to my own project and I guess my code with itsdangerious to create link is enough for now. I just remember when I removed the init part, the user was still None, so the error probably exists there and is more complex to continue...
Thanks anyways, If I switched back to use your package I will discuss the error later.