thunderstrike/plane
thunderstrike/plane
2
0
Fork 0
forked from github/plane
Code Pull Requests Activity

fix: cache invalidation on set password (#4504)

Browse Source
This commit is contained in:
Nikhil 2024-05-17 17:49:35 +05:30 committed by GitHub
parent 1bf80847f5
commit a150a9d268
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
apiserver/plane/authentication/views/common.py
View File

@ -16,6 +16,7 @@ from plane.authentication.adapter.error import (
AUTHENTICATION_ERROR_CODES, AUTHENTICATION_ERROR_CODES,
) )
from django.middleware.csrf import get_token from django.middleware.csrf import get_token
from plane.utils.cache import invalidate_cache
class CSRFTokenEndpoint(APIView): class CSRFTokenEndpoint(APIView):
@ -51,7 +52,6 @@ class ChangePasswordEndpoint(APIView):
status=status.HTTP_400_BAD_REQUEST, status=status.HTTP_400_BAD_REQUEST,
) )
if not user.check_password(old_password): if not user.check_password(old_password):
exc = AuthenticationException( exc = AuthenticationException(
error_code=AUTHENTICATION_ERROR_CODES[ error_code=AUTHENTICATION_ERROR_CODES[
@ -69,9 +69,7 @@ class ChangePasswordEndpoint(APIView):
results = zxcvbn(new_password) results = zxcvbn(new_password)
if results["score"] < 3: if results["score"] < 3:
exc = AuthenticationException( exc = AuthenticationException(
error_code=AUTHENTICATION_ERROR_CODES[ error_code=AUTHENTICATION_ERROR_CODES["INVALID_NEW_PASSWORD"],
"INVALID_NEW_PASSWORD"
],
error_message="INVALID_NEW_PASSWORD", error_message="INVALID_NEW_PASSWORD",
) )
return Response( return Response(
@ -89,7 +87,10 @@ class ChangePasswordEndpoint(APIView):
status=status.HTTP_200_OK, status=status.HTTP_200_OK,
) )
class SetUserPasswordEndpoint(APIView): class SetUserPasswordEndpoint(APIView):
@invalidate_cache("/api/users/me/")
def post(self, request): def post(self, request):
user = User.objects.get(pk=request.user.id) user = User.objects.get(pk=request.user.id)
password = request.data.get("password", False) password = request.data.get("password", False)