On Oct 27, 2009, at 8:12 PM, Nick Retallack wrote:

>
> So, how should the keys be generated?  Should I add in a random salt
> like the django-email-confirmation app does?
>
> Also, should the temp_key field on the PasswordReset model force
> uniqueness?

Before you invest your time into fixing anything related to password  
reset I just want to point you to my branch 
http://github.com/brosner/pinax/tree/improved_password_reset 
.

After thinking a bit more about how to solve some of the issues I  
realized there needs to be a slight refactor. Django already provides  
password reset functionality that addresses many of the more general  
issues. Some of the bugs are with the actual implementation we have  
now. You are welcome to help out with my branch, but for the most part  
I am sold on going the direction of re-using bits from Django.


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Pinax Core Development" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/pinax-core-dev?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to