edit password working

2 files changed, 50 insertions, 26 deletions

diff --git a/accounts/templates/accounts/index.html b/accounts/templates/accounts/index.html
index 06dcff2..ea9c160 100644
--- a/accounts/templates/accounts/index.html
+++ b/accounts/templates/accounts/index.html
@@ -9,9 +9,9 @@
 {% block toolbar %}
   <div class="nav-content {{color}}">
     <ul class="tabs tabs-transparent">
-      <li class="tab"><a class="active" href="#personal">Info Personali</a></li>
+      <li class="tab"><a class="{{personal_active}}" href="#personal">Info Personali</a></li>
       <li class="tab"><a href="#medic">Info Mediche</a></li>
-      <li class="tab"><a href="#settings">Impostazioni</a></li>
+      <li class="tab"><a class="{{settings_active}}" href="#settings">Impostazioni</a></li>
     </ul>
   </div>
 {% endblock%}
@@ -362,13 +362,13 @@
       </div>
       <div class="row">
         <div class="col s12">
-          <form method="post">
+          <form action="{% url 'personal'%}" id="form2" method="post">
             {% csrf_token %}
             <input type="hidden" name="action" id="action" value="password">
             {% if usable_password %}
             <div class="row">
               <div class="col s12">
-                <input id="old_password" type="password">
+                <input id="old_password" name="old_password" type="password">
                 <label for="old_password">Password attuale</label>
               </div>
             </div>
@@ -377,19 +377,19 @@
             {% endif %}
             <div class="row">
               <div class="col s12">
-                <input id="new_password1" type="password">
+                <input id="new_password1" name="new_password1" type="password">
                 <label for="new_password1">Nuova password</label>
               </div>
             </div>
             <div class="row">
               <div class="col s12">
-                <input id="new_password2" type="password">
+                <input id="new_password2" name="new_password2" type="password">
                 <label for="new_password2">Conferma nuova password</label>
               </div>
             </div>
             <div class="row">
               <div class="col s12">
-                <button type="submit" class="btn waves-effect waves-light {{color}}">Salva</button>
+                <button onclick="document.getElementById(form2).submit()" class="btn waves-effect waves-light {{color}}">Salva</button>
               </div>
             </div>
           </form>
@@ -457,6 +457,9 @@ $(document).ready(function() {
   {% for error in errors %}
     M.toast({html: '{{ error }}', classes: 'orange'})
   {% endfor %}
+  {% if ok_message %}
+    M.toast({html: '{{ ok_message }}', classes: 'green'})
+  {% endif %}
   document.getElementById("vac_certificate").onchange = function() {
     for (i=0; i < this.files.length; i++) {
       if(this.files[i].size > 1048576*10) {
diff --git a/accounts/views.py b/accounts/views.py
index 21f33da..2f291c6 100644
--- a/accounts/views.py
+++ b/accounts/views.py
@@ -1,7 +1,7 @@
 from django.shortcuts import render
 from django.urls import reverse
 from django.conf import settings
-from django.contrib.auth.forms import PasswordChangeForm, UserCreationForm
+from django.contrib.auth.forms import PasswordChangeForm, SetPasswordForm, UserCreationForm
 from django.contrib.auth.models import User
 from django.contrib.auth import login, authenticate, logout
 from django.http import FileResponse
@@ -37,8 +37,8 @@ class RegisterForm(UserCreationForm):
         for fieldname in ['username', 'password1', 'password2']:
             self.fields[fieldname].help_text = None
 
+# request data from user account
 def get_oauth_data(token):
-    # request data from user account
     headers = {
         "Authorization" : "Bearer " + token,
         "X-Scope": "with_roles",
@@ -50,6 +50,7 @@ def get_oauth_data(token):
 def oauth_login(request):
     redirect_uri = request.build_absolute_uri(reverse('auth'))
 
+    # forward next page requested by user
     if not request.GET["next"]:
         redirect_uri += "?next=/"
     else:
@@ -85,6 +86,7 @@ def auth(request):
 
         return HttpResponseRedirect(request.GET["next"])
 
+    # create new user
     user = User.objects.create_user(resp_data["email"], resp_data["email"])
 
     # create new usercode
@@ -117,6 +119,7 @@ def oauth_connect(request):
     redirect_uri = request.build_absolute_uri(reverse('auth_connect'))
     return hitobito.authorize_redirect(request, redirect_uri)
 
+# clear token only if user has another way to login
 @login_required
 def oauth_disconnect(request):
     if not request.user.has_usable_password():
@@ -208,6 +211,9 @@ def personal(request):
 @login_required
 def personal_wrapper(request, errors):
     context = {}
+    ok_message = ""
+    personal_active = "active"
+    settings_active = ""
     # additional user information
     usercode = UserCode.objects.filter(user=request.user)[0]
     # medical info
@@ -259,23 +265,34 @@ def personal_wrapper(request, errors):
 
         elif request.POST['action'] == "password":
             # get form object
-            print(request.POST)
+            if request.user.has_usable_password():
+                form2 = PasswordChangeForm(data=request.POST, user=request.user)
+            else:
+                form2 = SetPasswordForm(data=request.POST, user=request.user)
 
             # if form is valid and terms were accepted save user
-            password_errors = []
-            for err in password_errors:
-                if err.code == "password_mismatch":
-                    errors.append("Le due password non sono uguali")
-                elif err.code == "password_too_similar":
-                    errors.append("La password è troppo simile all'username")
-                elif err.code == "password_too_short":
-                    errors.append("La password è troppo corta")
-                elif err.code == "password_too_common":
-                    errors.append("La password è troppo comune")
-                elif err.code == "password_entirely_numeric":
-                    errors.append("La password deve contenere lettere")
-                elif err.code == "password_incorrect":
-                    errors.append("La password attuale è incorretta")
+            if form2.is_valid():
+                form2.save()
+                ok_message = "Password modificata con successo"
+                personal_active = ""
+                settings_active = "active"
+            else:
+                personal_active = ""
+                settings_active = "active"
+                for field in form2.errors.as_data().values():
+                    for err in field:
+                        if err.code == "password_mismatch":
+                            errors.append("Le due password non sono uguali")
+                        elif err.code == "password_too_similar":
+                            errors.append("La password è troppo simile all'username")
+                        elif err.code == "password_too_short":
+                            errors.append("La password è troppo corta")
+                        elif err.code == "password_too_common":
+                            errors.append("La password è troppo comune")
+                        elif err.code == "password_entirely_numeric":
+                            errors.append("La password deve contenere lettere")
+                        elif err.code == "password_incorrect":
+                            errors.append("La password attuale è incorretta")
 
         else:
             # set all attributes
@@ -448,8 +465,7 @@ def personal_wrapper(request, errors):
     if len(request.user.groups.values_list('name', flat=True)) == 0:
         branca_default = "selected"
     else:
-        parent_group = request.user.groups.values_list('name', flat=True)[
-            0]
+        parent_group = request.user.groups.values_list('name', flat=True)[0]
         if parent_group == "colonia":
             branca_castorini = "selected"
         elif parent_group == "muta":
@@ -487,9 +503,11 @@ def personal_wrapper(request, errors):
     else:
         card_name = ''
 
+    # check if user is connected with midata
     midata_user = (usercode.midata_id > 0)
     midata_disable = ""
 
+    # get user info from midata
     if midata_user:
         resp = get_oauth_data(usercode.midata_token)
 
@@ -559,9 +577,12 @@ def personal_wrapper(request, errors):
         'health_care_certificate': card_name,
         'vac_certificate': vac_name,
         'errors': errors,
+        'ok_message': ok_message,
         'midata_user': midata_user,
         'midata_disable': midata_disable,
         'usable_password': usable_password,
+        'settings_active': settings_active,
+        'personal_active': personal_active,
     }
 
     return render(request, 'accounts/index.html', context)