stevenpi / Link.Python.Django.DiyBlog

This blog is based on the assessment found [here](https://developer.mozilla.org/en-US/docs/Learn/Server-side/Django/django_assessment_blog).
MIT License
0 stars 0 forks source link

Users must be able to reset a forgotten password #31

Closed mbaechtold closed 6 years ago

mbaechtold commented 6 years ago

Django provides some class based views which handle the resetting of a forgotten password which you could just hook up in your url patterns.

⚠️Users which are authenticated via the Google login probably don't have a password stored in the database (or it should be set to "unusable"), so they should not be able to reset their password.