diff --git a/password_reset/views.py b/password_reset/views.py index 74c09fe20c7abdc7c82b7e3282e0124828c3064d..afd89b867010567a1fd622cde66399c5531c1fac 100644 --- a/password_reset/views.py +++ b/password_reset/views.py @@ -179,7 +179,8 @@ class PasswordResetConfirmView(FormView): form = self.form_class(request.POST) # On vérifie le token avant de servir la page. - if not self.is_token_valid(request, uidb64, token): + user = self.is_token_valid(request, uidb64, token) + if user is not None: return redirect(reverse_lazy("password_reset:password_reset")) # On vérifie la validité du formulaire @@ -206,10 +207,10 @@ class PasswordResetConfirmView(FormView): # Si `user` existe et le `token` n'a pas expiré. if user is not None and self.token_generator.check_token(user, token): - return True + return user # Sinon messages.error(request, _(u"Le token de réinitialisation n'est plus valide.")) - return False + return None password_reset_confirm = PasswordResetConfirmView.as_view()