mirror/RPGnotes
1
0
Fork 0
mirror of https://github.com/Findus23/RPGnotes.git synced 2024-09-19 15:43:45 +02:00
Code Releases Activity

do password reset on main domain

Browse source
This commit is contained in:
Lukas Winkler 2023-07-09 18:43:04 +02:00
parent abdb01befe
commit d51e5a5b87
Signed by: lukas
GPG key ID: 54DE4D798D244853
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
common/middlewares.py
View file

@ -1,9 +1,10 @@
from django.contrib.auth.views import redirect_to_login from django.contrib.auth.views import redirect_to_login
from django.core.exceptions import PermissionDenied from django.core.exceptions import PermissionDenied
from django.http import HttpRequest from django.http import HttpRequest, HttpResponseRedirect
from django.template.response import TemplateResponse from django.template.response import TemplateResponse
from campaigns.models import Campaign from campaigns.models import Campaign
from rpg_notes.secrets import HOME_DOMAIN_URL
from rpg_notes.settings import DEBUG from rpg_notes.settings import DEBUG
from users.models import TenantUser from users.models import TenantUser
@ -30,6 +31,9 @@ class AuthMiddleware:
r = TemplateResponse(request, "common/demo_readonly.jinja", status=405) r = TemplateResponse(request, "common/demo_readonly.jinja", status=405)
r.render() r.render()
return r return r
if tenant.pk != 1 and request.path.startswith("/password_reset/"):
# password reset should always been done on the main domain
return HttpResponseRedirect(HOME_DOMAIN_URL + request.path)
if not current_user.is_authenticated: if not current_user.is_authenticated:
return redirect_to_login(request.get_full_path()) return redirect_to_login(request.get_full_path())
if not current_user.tenants.filter(pk=tenant.pk).exists(): if not current_user.tenants.filter(pk=tenant.pk).exists():