mirror/RPGnotes
1
0
Fork 0
mirror of https://github.com/Findus23/RPGnotes.git synced 2024-09-19 15:43:45 +02:00
Code Releases Activity

do password reset on main domain

Browse source
This commit is contained in:
Lukas Winkler 2023-07-09 18:43:04 +02:00
parent abdb01befe
commit d51e5a5b87
Signed by: lukas
GPG key ID: 54DE4D798D244853
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
common/middlewares.py
View file

@ -1,9 +1,10 @@
from django.contrib.auth.views import redirect_to_login
from django.core.exceptions import PermissionDenied
from django.http import HttpRequest
from django.http import HttpRequest, HttpResponseRedirect
from django.template.response import TemplateResponse
from campaigns.models import Campaign
from rpg_notes.secrets import HOME_DOMAIN_URL
from rpg_notes.settings import DEBUG
from users.models import TenantUser
@ -30,6 +31,9 @@ class AuthMiddleware:
r = TemplateResponse(request, "common/demo_readonly.jinja", status=405)
r.render()
return r
if tenant.pk != 1 and request.path.startswith("/password_reset/"):
# password reset should always been done on the main domain
return HttpResponseRedirect(HOME_DOMAIN_URL + request.path)
if not current_user.is_authenticated:
return redirect_to_login(request.get_full_path())
if not current_user.tenants.filter(pk=tenant.pk).exists():