details: https://code.tryton.org/tryton/commit/3c7103539f52
branch: default
user: Cédric Krier <[email protected]>
date: Wed May 06 17:16:34 2026 +0200
description:
Ensure a reset password token is set before skipping the generation
diffstat:
modules/web_user/user.py | 12 +++++-------
1 files changed, 5 insertions(+), 7 deletions(-)
diffs (23 lines):
diff -r f53d174c558c -r 3c7103539f52 modules/web_user/user.py
--- a/modules/web_user/user.py Wed May 06 17:15:31 2026 +0200
+++ b/modules/web_user/user.py Wed May 06 17:16:34 2026 +0200
@@ -272,14 +272,12 @@
@ModelView.button
def reset_password(cls, users, from_=None):
now = datetime.datetime.now()
-
- # Prevent abusive reset
- def reset(user):
- return not (user.reset_password_token_expire
- and user.reset_password_token_expire > now)
- users = list(filter(reset, users))
-
for user in users:
+ if (user.reset_password_token
+ and user.reset_password_token_expire
+ and user.reset_password_token_expire > now):
+ # Prevent abusive reset
+ continue
user.set_reset_password_token()
cls.save(users)
_send_email(from_, users, cls.get_email_reset_password)
