Module: Sorcery::Model::Submodules::ResetPassword::InstanceMethods

Defined in:
lib/sorcery/model/submodules/reset_password.rb

Instance Method Summary collapse

Instance Method Details

#change_password!(new_password) ⇒ Object

Clears token and tries to update the new password for the user.



109
110
111
112
113
 
# File 'lib/sorcery/model/submodules/reset_password.rb', line 109

def change_password!(new_password)
  clear_reset_password_token
  self.send(:"#{sorcery_config.password_attribute_name}=", new_password)
  save
end

#deliver_reset_password_instructions! ⇒ Object

generates a reset code with expiration and sends an email to the user.



95
96
97
98
99
100
101
102
103
104
105
106
 
# File 'lib/sorcery/model/submodules/reset_password.rb', line 95

def deliver_reset_password_instructions!
  config = sorcery_config
  # hammering protection
  return false if config.reset_password_time_between_emails && self.send(config.reset_password_email_sent_at_attribute_name) && self.send(config.reset_password_email_sent_at_attribute_name) > config.reset_password_time_between_emails.ago.utc
  attributes = {config.reset_password_token_attribute_name => TemporaryToken.generate_random_token,
                config.reset_password_email_sent_at_attribute_name => Time.now.in_time_zone}
  attributes[config.reset_password_token_expires_at_attribute_name] = Time.now.in_time_zone + config.reset_password_expiration_period if config.reset_password_expiration_period
  self.class.transaction do
    self.update_many_attributes(attributes)
    send_reset_password_email! unless sorcery_config.reset_password_mailer_disabled
  end
end