{% blocktrans %}You're receiving this email because you need to finish activation process on {{ site_name }}.{% endblocktrans %}
{% trans "Please go to the following page to activate account:" %}
{{ protocol }}://{{ domain }}/{{ url|safe }}
{% trans "Thanks for using our site!" %}
{% blocktrans %}The {{ site_name }} team{% endblocktrans %}
{% endblock html_body %} ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/templates/email/confirmation.html 0000644 0000000 0000000 00000001150 15034742110 017656 0 ustar 00 {% load i18n %} {% block subject %} {% blocktrans %}{{ site_name }} - Your account has been successfully created and activated!{% endblocktrans %} {% endblock %} {% block text_body %} {% trans "Your account has been created and is ready to use!" %} {% trans "Thanks for using our site!" %} {% blocktrans %}The {{ site_name }} team{% endblocktrans %} {% endblock text_body %} {% block html_body %}{% trans "Your account has been created and is ready to use!" %}
{% trans "Thanks for using our site!" %}
{% blocktrans %}The {{ site_name }} team{% endblocktrans %}
{% endblock html_body %} ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/templates/email/password_changed_confirmation.html 0000644 0000000 0000000 00000001065 15034742110 023256 0 ustar 00 {% load i18n %} {% block subject %} {% blocktrans %}{{ site_name }} - Your password has been successfully changed!{% endblocktrans %} {% endblock %} {% block text_body %} {% trans "Your password has been changed!" %} {% trans "Thanks for using our site!" %} {% blocktrans %}The {{ site_name }} team{% endblocktrans %} {% endblock text_body %} {% block html_body %}{% trans "Your password has been changed!" %}
{% trans "Thanks for using our site!" %}
{% blocktrans %}The {{ site_name }} team{% endblocktrans %}
{% endblock html_body %} ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/templates/email/password_reset.html 0000644 0000000 0000000 00000002300 15034742110 020230 0 ustar 00 {% load i18n %} {% block subject %} {% blocktrans %}Password reset on {{ site_name }}{% endblocktrans %} {% endblock subject %} {% block text_body %} {% blocktrans %}You're receiving this email because you requested a password reset for your user account at {{ site_name }}.{% endblocktrans %} {% trans "Please go to the following page and choose a new password:" %} {{ protocol }}://{{ domain }}/{{ url|safe }} {% trans "Your username, in case you've forgotten:" %} {{ user.get_username }} {% trans "Thanks for using our site!" %} {% blocktrans %}The {{ site_name }} team{% endblocktrans %} {% endblock text_body %} {% block html_body %}{% blocktrans %}You're receiving this email because you requested a password reset for your user account at {{ site_name }}.{% endblocktrans %}
{% trans "Please go to the following page and choose a new password:" %}
{{ protocol }}://{{ domain }}/{{ url|safe }}{% trans "Your username, in case you've forgotten:" %} {{ user.get_username }}
{% trans "Thanks for using our site!" %}
{% blocktrans %}The {{ site_name }} team{% endblocktrans %}
{% endblock html_body %} ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/templates/email/username_changed_confirmation.html 0000644 0000000 0000000 00000001065 15034742110 023233 0 ustar 00 {% load i18n %} {% block subject %} {% blocktrans %}{{ site_name }} - Your username has been successfully changed!{% endblocktrans %} {% endblock %} {% block text_body %} {% trans "Your username has been changed!" %} {% trans "Thanks for using our site!" %} {% blocktrans %}The {{ site_name }} team{% endblocktrans %} {% endblock text_body %} {% block html_body %}{% trans "Your username has been changed!" %}
{% trans "Thanks for using our site!" %}
{% blocktrans %}The {{ site_name }} team{% endblocktrans %}
{% endblock html_body %} ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/templates/email/username_reset.html 0000644 0000000 0000000 00000002300 15034742110 020205 0 ustar 00 {% load i18n %} {% block subject %} {% blocktrans %}Username reset on {{ site_name }}{% endblocktrans %} {% endblock subject %} {% block text_body %} {% blocktrans %}You're receiving this email because you requested a username reset for your user account at {{ site_name }}.{% endblocktrans %} {% trans "Please go to the following page and choose a new username:" %} {{ protocol }}://{{ domain }}/{{ url|safe }} {% trans "Your username, in case you've forgotten:" %} {{ user.get_username }} {% trans "Thanks for using our site!" %} {% blocktrans %}The {{ site_name }} team{% endblocktrans %} {% endblock text_body %} {% block html_body %}{% blocktrans %}You're receiving this email because you requested a username reset for your user account at {{ site_name }}.{% endblocktrans %}
{% trans "Please go to the following page and choose a new username:" %}
{{ protocol }}://{{ domain }}/{{ url|safe }}{% trans "Your username, in case you've forgotten:" %} {{ user.get_username }}
{% trans "Thanks for using our site!" %}
{% blocktrans %}The {{ site_name }} team{% endblocktrans %}
{% endblock html_body %} ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/urls/__init__.py 0000644 0000000 0000000 00000000071 15034742110 014312 0 ustar 00 from .base import urlpatterns __all__ = ["urlpatterns"] ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/urls/authtoken.py 0000644 0000000 0000000 00000000360 15034742110 014556 0 ustar 00 from django.urls import re_path from djoser import views urlpatterns = [ re_path(r"^token/login/?$", views.TokenCreateView.as_view(), name="login"), re_path(r"^token/logout/?$", views.TokenDestroyView.as_view(), name="logout"), ] ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/urls/base.py 0000644 0000000 0000000 00000000364 15034742110 013472 0 ustar 00 from django.contrib.auth import get_user_model from rest_framework.routers import DefaultRouter from djoser import views router = DefaultRouter() router.register("users", views.UserViewSet) User = get_user_model() urlpatterns = router.urls ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/urls/jwt.py 0000644 0000000 0000000 00000000536 15034742110 013365 0 ustar 00 from django.urls import re_path from rest_framework_simplejwt import views urlpatterns = [ re_path(r"^jwt/create/?", views.TokenObtainPairView.as_view(), name="jwt-create"), re_path(r"^jwt/refresh/?", views.TokenRefreshView.as_view(), name="jwt-refresh"), re_path(r"^jwt/verify/?", views.TokenVerifyView.as_view(), name="jwt-verify"), ] ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/utils.py 0000644 0000000 0000000 00000002244 15034742110 012732 0 ustar 00 from django.contrib.auth import login, logout, user_logged_in, user_logged_out from django.utils.encoding import force_bytes, force_str from django.utils.http import urlsafe_base64_decode, urlsafe_base64_encode from djoser.conf import settings def encode_uid(pk): return force_str(urlsafe_base64_encode(force_bytes(pk))) def decode_uid(pk): return force_str(urlsafe_base64_decode(pk)) def login_user(request, user): token, _ = settings.TOKEN_MODEL.objects.get_or_create(user=user) if settings.CREATE_SESSION_ON_LOGIN: login(request, user) user_logged_in.send(sender=user.__class__, request=request, user=user) return token def logout_user(request): if settings.TOKEN_MODEL: settings.TOKEN_MODEL.objects.filter(user=request.user).delete() user_logged_out.send( sender=request.user.__class__, request=request, user=request.user ) if settings.CREATE_SESSION_ON_LOGIN: logout(request) class ActionViewMixin: def post(self, request, **kwargs): serializer = self.get_serializer(data=request.data) serializer.is_valid(raise_exception=True) return self._action(serializer) ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/views.py 0000644 0000000 0000000 00000031243 15034742110 012730 0 ustar 00 from django.contrib.auth import get_user_model, update_session_auth_hash from django.contrib.auth.tokens import default_token_generator from django.utils.timezone import now from rest_framework import generics, status, views, viewsets from rest_framework.decorators import action from rest_framework.exceptions import NotFound from rest_framework.response import Response from rest_framework.serializers import Serializer from djoser import signals, utils from djoser.compat import get_user_email from djoser.conf import settings User = get_user_model() class TokenCreateView(utils.ActionViewMixin, generics.GenericAPIView): """Use this endpoint to obtain user authentication token.""" serializer_class = settings.SERIALIZERS.token_create permission_classes = settings.PERMISSIONS.token_create def _action(self, serializer): token = utils.login_user(self.request, serializer.user) token_serializer_class = settings.SERIALIZERS.token return Response( data=token_serializer_class(token).data, status=status.HTTP_200_OK ) class TokenDestroyView(views.APIView): """Use this endpoint to logout user (remove user authentication token).""" serializer_class = Serializer permission_classes = settings.PERMISSIONS.token_destroy def post(self, request): utils.logout_user(request) return Response(status=status.HTTP_204_NO_CONTENT) class UserViewSet(viewsets.ModelViewSet): serializer_class = settings.SERIALIZERS.user queryset = User.objects.all() permission_classes = settings.PERMISSIONS.user token_generator = default_token_generator lookup_field = settings.USER_ID_FIELD def permission_denied(self, request, **kwargs): if ( settings.HIDE_USERS and request.user.is_authenticated and self.action in ["update", "partial_update", "list", "retrieve"] ): raise NotFound() super().permission_denied(request, **kwargs) def get_queryset(self): user = self.request.user queryset = super().get_queryset() if settings.HIDE_USERS and self.action == "list" and not user.is_staff: queryset = queryset.filter(pk=user.pk) return queryset def get_permissions(self): if self.action == "create": self.permission_classes = settings.PERMISSIONS.user_create elif self.action == "activation": self.permission_classes = settings.PERMISSIONS.activation elif self.action == "resend_activation": self.permission_classes = settings.PERMISSIONS.password_reset elif self.action == "list": self.permission_classes = settings.PERMISSIONS.user_list elif self.action == "reset_password": self.permission_classes = settings.PERMISSIONS.password_reset elif self.action == "reset_password_confirm": self.permission_classes = settings.PERMISSIONS.password_reset_confirm elif self.action == "set_password": self.permission_classes = settings.PERMISSIONS.set_password elif self.action == "set_username": self.permission_classes = settings.PERMISSIONS.set_username elif self.action == "reset_username": self.permission_classes = settings.PERMISSIONS.username_reset elif self.action == "reset_username_confirm": self.permission_classes = settings.PERMISSIONS.username_reset_confirm elif self.action == "destroy" or ( self.action == "me" and self.request and self.request.method == "DELETE" ): self.permission_classes = settings.PERMISSIONS.user_delete return super().get_permissions() def get_serializer_class(self): if self.action == "create": if settings.USER_CREATE_PASSWORD_RETYPE: return settings.SERIALIZERS.user_create_password_retype return settings.SERIALIZERS.user_create elif self.action == "destroy" or ( self.action == "me" and self.request and self.request.method == "DELETE" ): return settings.SERIALIZERS.user_delete elif self.action == "activation": return settings.SERIALIZERS.activation elif self.action == "resend_activation": return settings.SERIALIZERS.password_reset elif self.action == "reset_password": return settings.SERIALIZERS.password_reset elif self.action == "reset_password_confirm": if settings.PASSWORD_RESET_CONFIRM_RETYPE: return settings.SERIALIZERS.password_reset_confirm_retype return settings.SERIALIZERS.password_reset_confirm elif self.action == "set_password": if settings.SET_PASSWORD_RETYPE: return settings.SERIALIZERS.set_password_retype return settings.SERIALIZERS.set_password elif self.action == "set_username": if settings.SET_USERNAME_RETYPE: return settings.SERIALIZERS.set_username_retype return settings.SERIALIZERS.set_username elif self.action == "reset_username": return settings.SERIALIZERS.username_reset elif self.action == "reset_username_confirm": if settings.USERNAME_RESET_CONFIRM_RETYPE: return settings.SERIALIZERS.username_reset_confirm_retype return settings.SERIALIZERS.username_reset_confirm elif self.action == "me": return settings.SERIALIZERS.current_user return self.serializer_class def get_instance(self): return self.request.user def perform_create(self, serializer, *args, **kwargs): user = serializer.save(*args, **kwargs) signals.user_registered.send( sender=self.__class__, user=user, request=self.request ) context = {"user": user} to = [get_user_email(user)] if settings.SEND_ACTIVATION_EMAIL: settings.EMAIL.activation(self.request, context).send(to) elif settings.SEND_CONFIRMATION_EMAIL: settings.EMAIL.confirmation(self.request, context).send(to) def perform_update(self, serializer, *args, **kwargs): super().perform_update(serializer, *args, **kwargs) user = serializer.instance signals.user_updated.send( sender=self.__class__, user=user, request=self.request ) # should we send activation email after update? if settings.SEND_ACTIVATION_EMAIL and not user.is_active: context = {"user": user} to = [get_user_email(user)] settings.EMAIL.activation(self.request, context).send(to) def destroy(self, request, *args, **kwargs): instance = self.get_object() serializer = self.get_serializer(instance, data=request.data) serializer.is_valid(raise_exception=True) if instance == request.user: utils.logout_user(self.request) self.perform_destroy(instance) return Response(status=status.HTTP_204_NO_CONTENT) @action(["get", "put", "patch", "delete"], detail=False) def me(self, request, *args, **kwargs): self.get_object = self.get_instance if request.method == "GET": return self.retrieve(request, *args, **kwargs) elif request.method == "PUT": return self.update(request, *args, **kwargs) elif request.method == "PATCH": return self.partial_update(request, *args, **kwargs) elif request.method == "DELETE": return self.destroy(request, *args, **kwargs) @action(["post"], detail=False) def activation(self, request, *args, **kwargs): serializer = self.get_serializer(data=request.data) serializer.is_valid(raise_exception=True) user = serializer.user user.is_active = True user.save() signals.user_activated.send( sender=self.__class__, user=user, request=self.request ) if settings.SEND_CONFIRMATION_EMAIL: context = {"user": user} to = [get_user_email(user)] settings.EMAIL.confirmation(self.request, context).send(to) return Response(status=status.HTTP_204_NO_CONTENT) @action(["post"], detail=False) def resend_activation(self, request, *args, **kwargs): serializer = self.get_serializer(data=request.data) serializer.is_valid(raise_exception=True) user = serializer.get_user(is_active=False) if not settings.SEND_ACTIVATION_EMAIL: return Response(status=status.HTTP_400_BAD_REQUEST) if user: context = {"user": user} to = [get_user_email(user)] settings.EMAIL.activation(self.request, context).send(to) return Response(status=status.HTTP_204_NO_CONTENT) @action(["post"], detail=False) def set_password(self, request, *args, **kwargs): serializer = self.get_serializer(data=request.data) serializer.is_valid(raise_exception=True) self.request.user.set_password(serializer.data["new_password"]) self.request.user.save() if settings.PASSWORD_CHANGED_EMAIL_CONFIRMATION: context = {"user": self.request.user} to = [get_user_email(self.request.user)] settings.EMAIL.password_changed_confirmation(self.request, context).send(to) if settings.LOGOUT_ON_PASSWORD_CHANGE: utils.logout_user(self.request) elif settings.CREATE_SESSION_ON_LOGIN: update_session_auth_hash(self.request, self.request.user) return Response(status=status.HTTP_204_NO_CONTENT) @action(["post"], detail=False) def reset_password(self, request, *args, **kwargs): serializer = self.get_serializer(data=request.data) serializer.is_valid(raise_exception=True) user = serializer.get_user() if user: context = {"user": user} to = [get_user_email(user)] settings.EMAIL.password_reset(self.request, context).send(to) return Response(status=status.HTTP_204_NO_CONTENT) @action(["post"], detail=False) def reset_password_confirm(self, request, *args, **kwargs): serializer = self.get_serializer(data=request.data) serializer.is_valid(raise_exception=True) serializer.user.set_password(serializer.data["new_password"]) if hasattr(serializer.user, "last_login"): serializer.user.last_login = now() serializer.user.save() if settings.PASSWORD_CHANGED_EMAIL_CONFIRMATION: context = {"user": serializer.user} to = [get_user_email(serializer.user)] settings.EMAIL.password_changed_confirmation(self.request, context).send(to) return Response(status=status.HTTP_204_NO_CONTENT) @action(["post"], detail=False, url_path=f"set_{User.USERNAME_FIELD}") def set_username(self, request, *args, **kwargs): serializer = self.get_serializer(data=request.data) serializer.is_valid(raise_exception=True) user = self.request.user new_username = serializer.data["new_" + User.USERNAME_FIELD] setattr(user, User.USERNAME_FIELD, new_username) user.save() if settings.USERNAME_CHANGED_EMAIL_CONFIRMATION: context = {"user": user} to = [get_user_email(user)] settings.EMAIL.username_changed_confirmation(self.request, context).send(to) return Response(status=status.HTTP_204_NO_CONTENT) @action(["post"], detail=False, url_path=f"reset_{User.USERNAME_FIELD}") def reset_username(self, request, *args, **kwargs): serializer = self.get_serializer(data=request.data) serializer.is_valid(raise_exception=True) user = serializer.get_user() if user: context = {"user": user} to = [get_user_email(user)] settings.EMAIL.username_reset(self.request, context).send(to) return Response(status=status.HTTP_204_NO_CONTENT) @action(["post"], detail=False, url_path=f"reset_{User.USERNAME_FIELD}_confirm") def reset_username_confirm(self, request, *args, **kwargs): serializer = self.get_serializer(data=request.data) serializer.is_valid(raise_exception=True) new_username = serializer.data["new_" + User.USERNAME_FIELD] setattr(serializer.user, User.USERNAME_FIELD, new_username) if hasattr(serializer.user, "last_login"): serializer.user.last_login = now() serializer.user.save() if settings.USERNAME_CHANGED_EMAIL_CONFIRMATION: context = {"user": serializer.user} to = [get_user_email(serializer.user)] settings.EMAIL.username_changed_confirmation(self.request, context).send(to) return Response(status=status.HTTP_204_NO_CONTENT) ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/webauthn/__init__.py 0000644 0000000 0000000 00000000000 15034742110 015132 0 ustar 00 ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/webauthn/apps.py 0000644 0000000 0000000 00000000142 15034742110 014345 0 ustar 00 from django.apps import AppConfig class WebauthnConfig(AppConfig): name = "djoser.webauthn" ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/webauthn/migrations/0001_initial.py 0000644 0000000 0000000 00000002677 15034742110 017666 0 ustar 00 # Generated by Django 2.2.4 on 2019-09-05 05:11 import django.db.models.deletion from django.conf import settings from django.db import migrations, models class Migration(migrations.Migration): initial = True dependencies = [migrations.swappable_dependency(settings.AUTH_USER_MODEL)] operations = [ migrations.CreateModel( name="CredentialOptions", fields=[ ( "id", models.AutoField( auto_created=True, primary_key=True, serialize=False, verbose_name="ID", ), ), ("challenge", models.TextField()), ("username", models.TextField(unique=True)), ("display_name", models.TextField()), ("ukey", models.TextField(unique=True)), ("credential_id", models.TextField()), ("sign_count", models.IntegerField(null=True)), ("public_key", models.TextField()), ( "user", models.OneToOneField( null=True, on_delete=django.db.models.deletion.CASCADE, related_name="credential_options", to=settings.AUTH_USER_MODEL, ), ), ], ) ] ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/webauthn/migrations/__init__.py 0000644 0000000 0000000 00000000000 15034742110 017306 0 ustar 00 ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/webauthn/models.py 0000644 0000000 0000000 00000001052 15034742110 014666 0 ustar 00 from django.conf import settings from django.db import models class CredentialOptions(models.Model): challenge = models.TextField() username = models.TextField(unique=True) display_name = models.TextField() ukey = models.TextField(unique=True) user = models.OneToOneField( settings.AUTH_USER_MODEL, related_name="credential_options", null=True, on_delete=models.CASCADE, ) credential_id = models.TextField() sign_count = models.IntegerField(null=True) public_key = models.TextField() ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/webauthn/serializers.py 0000644 0000000 0000000 00000004002 15034742110 015735 0 ustar 00 from django.contrib.auth import get_user_model from rest_framework import serializers from djoser.conf import settings from djoser.serializers import UserCreateMixin from .models import CredentialOptions from .utils import create_challenge, create_ukey User = get_user_model() class WebauthnSignupSerializer(serializers.ModelSerializer): class Meta: model = CredentialOptions fields = ("username", "display_name") def create(self, validated_data): validated_data.update( { "challenge": create_challenge( length=settings.WEBAUTHN["CHALLENGE_LENGTH"] ), "ukey": create_ukey(length=settings.WEBAUTHN["UKEY_LENGTH"]), } ) return super().create(validated_data) def validate_username(self, username): if User.objects.filter(username=username).exists(): raise serializers.ValidationError(f"User {username} already exists.") return username class WebauthnCreateUserSerializer(UserCreateMixin, serializers.ModelSerializer): class Meta: model = User fields = tuple(User.REQUIRED_FIELDS) + ( settings.LOGIN_FIELD, User._meta.pk.name, ) class WebauthnLoginSerializer(serializers.Serializer): default_error_messages = { "invalid_credentials": settings.CONSTANTS.messages.INVALID_CREDENTIALS_ERROR } def __init__(self, *args, **kwargs): super().__init__(*args, **kwargs) self.fields[settings.LOGIN_FIELD] = serializers.CharField(required=True) def validate_username(self, username): try: search_kwargs = { settings.LOGIN_FIELD: username, "credential_options__isnull": False, } self.user = user = User.objects.get(**search_kwargs) except User.DoesNotExist: self.fail("invalid_credentials") if not user.is_active: self.fail("invalid_credentials") return username ././@PaxHeader 0000000 0000000 0000000 00000000034 00000000000 010212 x ustar 00 28 mtime=1752417351.5909755 djoser-2.3.3/djoser/webauthn/urls.py 0000644 0000000 0000000 00000001005 15034742110 014366 0 ustar 00 from django.urls import re_path from . import views urlpatterns = [ re_path( r"^signup_request/$", views.SignupRequestView.as_view(), name="webauthn_signup_request", ), re_path( r"^signup/(?P