password reset online test
This commit is contained in:
@@ -1101,40 +1101,11 @@ def update_admin_credentials():
|
||||
if not jwt_token:
|
||||
return jsonify({'error': 'No JWT token received'}), 400
|
||||
|
||||
# Generate a secure password
|
||||
import secrets
|
||||
import string
|
||||
alphabet = string.ascii_letters + string.digits + "!@#$%^&*"
|
||||
new_password = ''.join(secrets.choice(alphabet) for i in range(16))
|
||||
|
||||
# First, login with default credentials to get admin token
|
||||
login_response = requests.post(
|
||||
f"{instance_url.rstrip('/')}/api/admin/login",
|
||||
headers={
|
||||
'Content-Type': 'application/json',
|
||||
'Accept': 'application/json'
|
||||
},
|
||||
json={
|
||||
'email': 'administrator@docupulse.com',
|
||||
'password': 'changeme'
|
||||
},
|
||||
timeout=10
|
||||
)
|
||||
|
||||
if login_response.status_code != 200:
|
||||
return jsonify({'error': f'Failed to login with default credentials: {login_response.text}'}), 400
|
||||
|
||||
login_data = login_response.json()
|
||||
if login_data.get('status') != 'success' or not login_data.get('token'):
|
||||
return jsonify({'error': 'Failed to get admin token'}), 400
|
||||
|
||||
admin_token = login_data.get('token')
|
||||
|
||||
# Get the admin user ID first
|
||||
users_response = requests.get(
|
||||
f"{instance_url.rstrip('/')}/api/admin/contacts",
|
||||
headers={
|
||||
'Authorization': f'Bearer {admin_token}',
|
||||
'Authorization': f'Bearer {jwt_token}',
|
||||
'Accept': 'application/json'
|
||||
},
|
||||
timeout=10
|
||||
@@ -1148,7 +1119,7 @@ def update_admin_credentials():
|
||||
|
||||
# Find the administrator user
|
||||
for user in users_data:
|
||||
if user.get('email') == 'administrator@docupulse.com':
|
||||
if user.get('email') == email:
|
||||
admin_user = user
|
||||
break
|
||||
|
||||
@@ -1157,37 +1128,359 @@ def update_admin_credentials():
|
||||
|
||||
admin_user_id = admin_user.get('id')
|
||||
|
||||
# Update the admin user with new email and password
|
||||
update_response = requests.put(
|
||||
f"{instance_url.rstrip('/')}/api/admin/contacts/{admin_user_id}",
|
||||
# Try to login with default credentials first
|
||||
try:
|
||||
login_response = requests.post(
|
||||
f"{instance_url.rstrip('/')}/api/admin/login",
|
||||
headers={
|
||||
'Content-Type': 'application/json',
|
||||
'Accept': 'application/json'
|
||||
},
|
||||
json={
|
||||
'email': 'administrator@docupulse.com',
|
||||
'password': 'changeme'
|
||||
},
|
||||
timeout=10
|
||||
)
|
||||
|
||||
# If login with default credentials succeeds, update the credentials
|
||||
if login_response.status_code == 200:
|
||||
login_data = login_response.json()
|
||||
if login_data.get('status') == 'success' and login_data.get('token'):
|
||||
admin_token = login_data.get('token')
|
||||
|
||||
# Generate a secure password
|
||||
import secrets
|
||||
import string
|
||||
alphabet = string.ascii_letters + string.digits + "!@#$%^&*"
|
||||
new_password = ''.join(secrets.choice(alphabet) for i in range(16))
|
||||
|
||||
# Update the admin user with new email and password
|
||||
update_response = requests.put(
|
||||
f"{instance_url.rstrip('/')}/api/admin/contacts/{admin_user_id}",
|
||||
headers={
|
||||
'Authorization': f'Bearer {admin_token}',
|
||||
'Content-Type': 'application/json',
|
||||
'Accept': 'application/json'
|
||||
},
|
||||
json={
|
||||
'email': email,
|
||||
'password': new_password,
|
||||
'username': 'administrator',
|
||||
'last_name': 'Administrator',
|
||||
'role': 'admin'
|
||||
},
|
||||
timeout=10
|
||||
)
|
||||
|
||||
if update_response.status_code != 200:
|
||||
return jsonify({'error': f'Failed to update admin credentials: {update_response.text}'}), 400
|
||||
|
||||
return jsonify({
|
||||
'message': 'Admin credentials updated successfully',
|
||||
'data': {
|
||||
'email': email,
|
||||
'password': new_password,
|
||||
'username': 'administrator',
|
||||
'instance_url': instance_url
|
||||
}
|
||||
})
|
||||
|
||||
# If login with default credentials fails, check if email is already updated
|
||||
else:
|
||||
# Check if the email is already the target email
|
||||
if admin_user.get('email') == email:
|
||||
return jsonify({
|
||||
'message': 'Admin credentials already updated',
|
||||
'data': {
|
||||
'email': email,
|
||||
'password': 'Already set',
|
||||
'username': 'administrator',
|
||||
'instance_url': instance_url,
|
||||
'already_updated': True
|
||||
}
|
||||
})
|
||||
else:
|
||||
return jsonify({'error': 'Failed to login with default credentials and email not yet updated'}), 400
|
||||
|
||||
except Exception as login_error:
|
||||
# If there's an error with login, check if email is already updated
|
||||
if admin_user.get('email') == email:
|
||||
return jsonify({
|
||||
'message': 'Admin credentials already updated',
|
||||
'data': {
|
||||
'email': email,
|
||||
'password': 'Already set',
|
||||
'username': 'administrator',
|
||||
'instance_url': instance_url,
|
||||
'already_updated': True
|
||||
}
|
||||
})
|
||||
else:
|
||||
return jsonify({'error': f'Login error and email not yet updated: {str(login_error)}'}), 400
|
||||
|
||||
except Exception as e:
|
||||
current_app.logger.error(f"Error updating admin credentials: {str(e)}")
|
||||
return jsonify({'error': str(e)}), 500
|
||||
|
||||
@launch_api.route('/send-completion-email', methods=['POST'])
|
||||
@csrf.exempt
|
||||
def send_completion_email():
|
||||
"""Send completion email to client with instance details and password reset link"""
|
||||
try:
|
||||
if not request.is_json:
|
||||
return jsonify({'error': 'Request must be JSON'}), 400
|
||||
|
||||
data = request.get_json()
|
||||
required_fields = ['instance_url', 'company_data', 'credentials_data']
|
||||
|
||||
if not all(field in data for field in required_fields):
|
||||
missing_fields = [field for field in required_fields if field not in data]
|
||||
return jsonify({'error': f'Missing required fields: {", ".join(missing_fields)}'}), 400
|
||||
|
||||
instance_url = data['instance_url']
|
||||
company_data = data['company_data']
|
||||
credentials_data = data['credentials_data']
|
||||
|
||||
# Get SMTP settings from master instance
|
||||
smtp_settings = KeyValueSettings.get_value('smtp_settings')
|
||||
if not smtp_settings:
|
||||
return jsonify({'error': 'SMTP settings not configured'}), 400
|
||||
|
||||
# Get the instance from database to get the connection token
|
||||
instance = Instance.query.filter_by(main_url=instance_url).first()
|
||||
|
||||
if not instance:
|
||||
return jsonify({'error': 'Instance not found in database'}), 404
|
||||
|
||||
if not instance.connection_token:
|
||||
return jsonify({'error': 'Instance not authenticated'}), 400
|
||||
|
||||
# Get JWT token from the launched instance using management API key
|
||||
jwt_response = requests.post(
|
||||
f"{instance_url.rstrip('/')}/api/admin/management-token",
|
||||
headers={
|
||||
'Authorization': f'Bearer {admin_token}',
|
||||
'Content-Type': 'application/json',
|
||||
'X-API-Key': instance.connection_token,
|
||||
'Accept': 'application/json'
|
||||
},
|
||||
json={
|
||||
'email': email,
|
||||
'password': new_password,
|
||||
'username': 'administrator',
|
||||
'last_name': 'Administrator',
|
||||
'role': 'admin'
|
||||
},
|
||||
timeout=10
|
||||
)
|
||||
|
||||
if update_response.status_code != 200:
|
||||
return jsonify({'error': f'Failed to update admin credentials: {update_response.text}'}), 400
|
||||
if jwt_response.status_code != 200:
|
||||
return jsonify({'error': f'Failed to get JWT token: {jwt_response.text}'}), 400
|
||||
|
||||
return jsonify({
|
||||
'message': 'Admin credentials updated successfully',
|
||||
'data': {
|
||||
'email': email,
|
||||
'password': new_password,
|
||||
'username': 'administrator',
|
||||
'instance_url': instance_url
|
||||
}
|
||||
})
|
||||
jwt_data = jwt_response.json()
|
||||
jwt_token = jwt_data.get('token')
|
||||
|
||||
if not jwt_token:
|
||||
return jsonify({'error': 'No JWT token received'}), 400
|
||||
|
||||
# Get the admin user ID from the launched instance
|
||||
users_response = requests.get(
|
||||
f"{instance_url.rstrip('/')}/api/admin/contacts",
|
||||
headers={
|
||||
'Authorization': f'Bearer {jwt_token}',
|
||||
'Accept': 'application/json'
|
||||
},
|
||||
timeout=10
|
||||
)
|
||||
|
||||
if users_response.status_code != 200:
|
||||
return jsonify({'error': f'Failed to get users: {users_response.text}'}), 400
|
||||
|
||||
users_data = users_response.json()
|
||||
admin_user = None
|
||||
|
||||
# Find the administrator user by email
|
||||
for user in users_data:
|
||||
if user.get('email') == credentials_data.get('email'):
|
||||
admin_user = user
|
||||
break
|
||||
|
||||
if not admin_user:
|
||||
return jsonify({'error': 'Administrator user not found'}), 404
|
||||
|
||||
admin_user_id = admin_user.get('id')
|
||||
|
||||
# Generate password reset token for the launched instance using management API
|
||||
reset_response = requests.post(
|
||||
f"{instance_url.rstrip('/')}/api/admin/generate-password-reset/{admin_user_id}",
|
||||
headers={
|
||||
'Authorization': f'Bearer {jwt_token}',
|
||||
'Accept': 'application/json'
|
||||
},
|
||||
timeout=10
|
||||
)
|
||||
|
||||
if reset_response.status_code != 200:
|
||||
return jsonify({'error': f'Failed to generate password reset: {reset_response.text}'}), 400
|
||||
|
||||
reset_data = reset_response.json()
|
||||
reset_url = reset_data.get('reset_url')
|
||||
expires_at = reset_data.get('expires_at')
|
||||
|
||||
if not reset_url:
|
||||
return jsonify({'error': 'No reset URL received from instance'}), 400
|
||||
|
||||
# Create email content
|
||||
subject = "Your DocuPulse Instance is Ready!"
|
||||
|
||||
# Build HTML email content
|
||||
html_content = f"""
|
||||
<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<style>
|
||||
body {{ font-family: Arial, sans-serif; line-height: 1.6; color: #333; }}
|
||||
.container {{ max-width: 600px; margin: 0 auto; padding: 20px; }}
|
||||
.header {{ background-color: #16767b; color: white; padding: 20px; text-align: center; border-radius: 5px 5px 0 0; }}
|
||||
.content {{ background-color: #f9f9f9; padding: 20px; border-radius: 0 0 5px 5px; }}
|
||||
.credentials {{ background-color: #e8f5e9; padding: 15px; border-radius: 5px; margin: 15px 0; }}
|
||||
.button {{ display: inline-block; background-color: #16767b; color: white; padding: 12px 24px; text-decoration: none; border-radius: 5px; margin: 10px 0; }}
|
||||
.footer {{ margin-top: 20px; padding-top: 20px; border-top: 1px solid #ddd; font-size: 12px; color: #666; }}
|
||||
.info-box {{ background-color: #e3f2fd; padding: 15px; border-radius: 5px; margin: 15px 0; }}
|
||||
.security-notice {{ background-color: #fff3cd; border: 1px solid #ffeaa7; padding: 15px; border-radius: 5px; margin: 15px 0; }}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="container">
|
||||
<div class="header">
|
||||
<h1>🎉 Your DocuPulse Instance is Ready!</h1>
|
||||
</div>
|
||||
<div class="content">
|
||||
<p>Dear {company_data.get('name', 'Valued Customer')},</p>
|
||||
|
||||
<p>Great news! Your DocuPulse instance has been successfully deployed and configured.
|
||||
You can now access your secure document management platform.</p>
|
||||
|
||||
<div class="info-box">
|
||||
<h3>📋 Instance Details</h3>
|
||||
<p><strong>Instance URL:</strong> <a href="{instance_url}">{instance_url}</a></p>
|
||||
<p><strong>Company Name:</strong> {company_data.get('name', 'Not set')}</p>
|
||||
<p><strong>Industry:</strong> {company_data.get('industry', 'Not set')}</p>
|
||||
<p><strong>Deployment Date:</strong> {datetime.utcnow().strftime('%B %d, %Y at %I:%M %p UTC')}</p>
|
||||
</div>
|
||||
|
||||
<div class="credentials">
|
||||
<h3>🔐 Account Access</h3>
|
||||
<p><strong>Email Address:</strong> {credentials_data.get('email', 'Not set')}</p>
|
||||
<p><strong>Username:</strong> {credentials_data.get('username', 'administrator')}</p>
|
||||
|
||||
<div class="security-notice">
|
||||
<h4>🔒 Security Setup Required</h4>
|
||||
<p>For your security, you need to set up your password. Click the button below to create your secure password.</p>
|
||||
<p><strong>Password Reset Link Expires:</strong> {expires_at}</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div style="text-align: center; margin: 30px 0;">
|
||||
<a href="{reset_url}" class="button">🔐 Set Up Your Password</a>
|
||||
<br><br>
|
||||
<a href="{instance_url}" class="button">🚀 Access Your Instance</a>
|
||||
</div>
|
||||
|
||||
<h3>✅ What's Been Configured</h3>
|
||||
<ul>
|
||||
<li>✅ Secure SSL certificate for HTTPS access</li>
|
||||
<li>✅ Company information and branding</li>
|
||||
<li>✅ Custom color scheme</li>
|
||||
<li>✅ Admin account created</li>
|
||||
<li>✅ Document management system ready</li>
|
||||
</ul>
|
||||
|
||||
<h3>🎯 Next Steps</h3>
|
||||
<ol>
|
||||
<li>Click the "Set Up Your Password" button above</li>
|
||||
<li>Create your secure password</li>
|
||||
<li>Return to your instance and log in</li>
|
||||
<li>Explore your new DocuPulse platform</li>
|
||||
<li>Start uploading and organizing your documents</li>
|
||||
<li>Invite team members to collaborate</li>
|
||||
</ol>
|
||||
|
||||
<div class="footer">
|
||||
<p>If you have any questions or need assistance, please don't hesitate to contact our support team.</p>
|
||||
<p>Thank you for choosing DocuPulse!</p>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
"""
|
||||
|
||||
# Build plain text version
|
||||
text_content = f"""
|
||||
Your DocuPulse Instance is Ready!
|
||||
|
||||
Dear {company_data.get('name', 'Valued Customer')},
|
||||
|
||||
Great news! Your DocuPulse instance has been successfully deployed and configured.
|
||||
|
||||
INSTANCE DETAILS:
|
||||
- Instance URL: {instance_url}
|
||||
- Company Name: {company_data.get('name', 'Not set')}
|
||||
- Industry: {company_data.get('industry', 'Not set')}
|
||||
- Deployment Date: {datetime.utcnow().strftime('%B %d, %Y at %I:%M %p UTC')}
|
||||
|
||||
ACCOUNT ACCESS:
|
||||
- Email Address: {credentials_data.get('email', 'Not set')}
|
||||
- Username: {credentials_data.get('username', 'administrator')}
|
||||
|
||||
SECURITY SETUP REQUIRED:
|
||||
For your security, you need to set up your password.
|
||||
|
||||
Password Reset Link: {reset_url}
|
||||
Password Reset Link Expires: {expires_at}
|
||||
|
||||
WHAT'S BEEN CONFIGURED:
|
||||
✓ Secure SSL certificate for HTTPS access
|
||||
✓ Company information and branding
|
||||
✓ Custom color scheme
|
||||
✓ Admin account created
|
||||
✓ Document management system ready
|
||||
|
||||
NEXT STEPS:
|
||||
1. Click the password reset link above
|
||||
2. Create your secure password
|
||||
3. Return to your instance and log in
|
||||
4. Explore your new DocuPulse platform
|
||||
5. Start uploading and organizing your documents
|
||||
6. Invite team members to collaborate
|
||||
|
||||
If you have any questions or need assistance, please don't hesitate to contact our support team.
|
||||
|
||||
Thank you for choosing DocuPulse!
|
||||
"""
|
||||
|
||||
# Send email using master instance's email system
|
||||
from utils.email_templates import send_email
|
||||
|
||||
try:
|
||||
send_email(
|
||||
to_email=company_data.get('email'),
|
||||
subject=subject,
|
||||
html_content=html_content,
|
||||
text_content=text_content
|
||||
)
|
||||
|
||||
# Log the email sending
|
||||
current_app.logger.info(f"Completion email sent to {company_data.get('email')} for instance {instance_url}")
|
||||
|
||||
return jsonify({
|
||||
'message': 'Completion email sent successfully',
|
||||
'data': {
|
||||
'recipient': company_data.get('email'),
|
||||
'subject': subject,
|
||||
'instance_url': instance_url,
|
||||
'password_reset_sent': True
|
||||
}
|
||||
})
|
||||
|
||||
except Exception as email_error:
|
||||
current_app.logger.error(f"Failed to send completion email: {str(email_error)}")
|
||||
return jsonify({'error': f'Failed to send email: {str(email_error)}'}), 500
|
||||
|
||||
except Exception as e:
|
||||
current_app.logger.error(f"Error updating admin credentials: {str(e)}")
|
||||
current_app.logger.error(f"Error sending completion email: {str(e)}")
|
||||
return jsonify({'error': str(e)}), 500
|
||||
Reference in New Issue
Block a user