There's also a little nonce manager I coded up at
http://svn.plone.org/svn/collective/collective.salesforce.profilemanager/trunk/collective/salesforce/profilemanager/nonce.py
(in a package which is otherwise a throwaway experiment to provide some
helper methods for doing something like what Maurits was proposing)
which uses a copy of the function PasswordResetTool uses to generate
nonces. (These days we should probably use uuid.uuid4() though,
instead.) Example usage in interfaces.py.

On 4/22/10 8:23 AM, Steve McMahon wrote:
> And, if we're looking for places to poach code, Listen has e-mail
> confirmation built in. Perhaps it could be generalized to be useful
> for anything that needs a double opt-in.
>
> On Thu, Apr 22, 2010 at 5:28 AM, David Hostetler
> <[email protected] <mailto:[email protected]>> wrote:
>
>     PlonePoPoll tracks user participation in order to ensure one vote
>     per user.
>
>     And PloneSurvey similarly manages information per user, as
>     persistent data (allowing for multiple form 'saves' prior to
>     submission).
>
>     Obviously that's not the email side of the equation, but they may
>     have some pieces worth poaching.
>
>
>     regards,
>
>     -David
>
>
>
>     On Wed, Apr 21, 2010 at 17:55, Maurits van Rees
>     <[email protected] <mailto:[email protected]>>
>     wrote:
>
>         Hi,
>
>         I've got an idea for an addition to PloneFormGen (in a separate
>         package).  To avoid reinventing the wheel I wonder if the
>         following has
>         been done already.  Summary: can you do email confirmation,
>         also known
>         as double-opt-in, in PloneFormGen?
>
>         The idea would be like this:
>
>         - You create a form where you subscribe with your email
>         address to a
>         news letter.  Or the form allows you to for example fill in a
>         poll, and
>         you want to allow only one entry per person (simplified as one
>         entry per
>         email address).
>
>         -  PloneFormGen should then store this address (plus possibly
>         other
>         fields) *provisionally*, probably just by setting a server
>         side field
>         pending=True or confirmed=False.
>
>         - Any code that wants to get the list of subscribers or of
>         valid poll
>         entries can filter out the not yet confirmed ones by checking
>         the value
>         of that pending or confirmed field.
>
>         - PFG should create and store a secret comparable to what the
>         PasswordResetTool does; possibly we can simply use the id that
>         is used
>         to store the data in the BTree.
>
>         - We send out an email to the given address, with the
>         generated secret
>         and a link that allows the user to confirm his subscription or
>         confirm
>         his entry in the poll.
>
>         - The link probably points to the same form; a few conditions
>         on fields
>         can work nicely here.  But possibly we need a separate form
>         here that
>         knows how to get and set the saved data in the other form,
>         though that
>         sounds like a bad idea.
>
>
>         Most of this can be done with standard PloneFormGen.  And I
>         have some
>         ideas for the missing pieces.  But has anyone done something
>         similar?
>         And is that available as package on pypi or plone.org
>         <http://plone.org>?
>
>         Thanks,
>
>         Maurits van Rees
>         (who should come up with a proper email signature again after
>         having
>         switched to Mac, probably pointing to http://zestsoftware.nl/ and
>         possibly saying something profound and/or funny, so I guess
>         this fits
>         the bill...)
>
>         _______________________________________________
>         Product-Developers mailing list
>         [email protected]
>         <mailto:[email protected]>
>         http://lists.plone.org/mailman/listinfo/product-developers
>
>
>
>     _______________________________________________
>     Product-Developers mailing list
>     [email protected]
>     <mailto:[email protected]>
>     http://lists.plone.org/mailman/listinfo/product-developers
>
>
>
> _______________________________________________
> Product-Developers mailing list
> [email protected]
> http://lists.plone.org/mailman/listinfo/product-developers
>   


--
David Glick
Web Developer
Groundwire
206.286.1235x32
[email protected]
http://groundwire.org

Sign up for Groundwire News!  
 Tips, tools and tricks delivered directly to your inbox.
 http://groundwire.org/news-signup


_______________________________________________
Product-Developers mailing list
[email protected]
http://lists.plone.org/mailman/listinfo/product-developers

Reply via email to