This pull request makes the following changes, so the new member can set their password more securely:
the OrgCreateMemberAlmostDoneView uses a uid and a one-time-use token to create a URL for the new member to set their password"
a new OrgCreateMemberInvalidTokenView view has been created for when the user has an invalid token
the OrgCreateMemberCompleteView now requires a valid token for GET and POST requests. Invalid tokens redirect to the OrgCreateMemberInvalidTokenView. Successfully setting the member's password invalidates the token.
the OrgCreateMemberSuccessView no longer requires the user to be an org user, or to be authenticated
This pull request makes the following changes, so the new member can set their password more securely:
OrgCreateMemberAlmostDoneView
uses a uid and a one-time-use token to create a URL for the new member to set their password"OrgCreateMemberInvalidTokenView
view has been created for when the user has an invalid tokenOrgCreateMemberCompleteView
now requires a valid token for GET and POST requests. Invalid tokens redirect to theOrgCreateMemberInvalidTokenView
. Successfully setting the member's password invalidates the token.OrgCreateMemberSuccessView
no longer requires the user to be an org user, or to be authenticated