Support invitations

[ehmatthes]

This will be an invitation-only project to start out. Rather than dealing with this manually, make a page where I and other site admins can enter an email address and click a button, which will send the person an invitation. It will create a username and a temporary password, and will send them to the forgot password page where they can set a new password. Or, set password page.

• [x] Define url, view function, template.
  • [x] Restrict to site admins only.
• [x] Enter an email address, which will create an account and send the person an invite.
• [x] Remove diagnostic print() calls.
• [x] Merge, push, delete local branch.

[ehmatthes]

Notes

• [x] If email matches existing user, reissue the invitation. If not, create an account and send an invitation.
• [x] Messages are not being cleared consistently.
  • [x] Reproduce: Log out, log in, go to page, invite new user. Probably see multiple login success messages. See #33

[ehmatthes]

Sending the invitation

• [x] Send a simple, non personalized email locally.
• [x] Send a simple, non personalized email live.
• [x] Use a template for email, so I can include username.
  • [x] See: https://anymail.readthedocs.io/en/stable/tips/django_templates/
• [x] Send a local email with a link where the user can set a password.
  • [x] This should be a new page, where they enter their email and two passwords.
  • [x] If the user associated with this email does not have a password set, set the password and redirect to login page.
  • [x] Should probably be using allauth SetPasswordForm. Can I subclass this form, and add an email field?
  • [x] If user has password set or doesn't exist, give generic "This request cannot be processed message." Don't let people enter emails to see if others have accounts or not.
  • [x] Include link in html and text email bodies.
• [x] Send a live email where the user can set a password.

[ehmatthes]

Final Tasks

• [x] Admins should not be able to send someone an invite if their password is usable. Message that this person can simply reset their password if they forgot it. (This is fine, current functionality does not mess with existing user's account.)

[ehmatthes]

Another good issue to close. :)