DEV Community

Cover image for USER PASSWORD RESET USING DJANGO

USER PASSWORD RESET USING DJANGO

TABLE OF CONTENTS

1. Introduction
2. Prerequisites
3. Creating a login Template

  • Definition of terms
  • Creating a login Template

4. Implementing user password reset in Django

  • Configuring email settings
  • URL configuration
  • Creating templates

    • Password request form
    • Password request email template
    • Password reset
    • Password reset complete form
  • Email template

  • Testing

5. Conclusion
6. References

Introduction

In web applications, it's crucial to include password reset functionality to ensure both security and user-friendliness. When using Django, a high-level Python web framework, there are built-in features that simplify the creation of this functionality. This involves setting up a process where users can receive an email allowing them to reset their passwords on the server side, with the email sent directly to their inbox.
By following the guidelines provided, you can efficiently implement user password reset functionality in your Django application.

Steps to create Django app

  1. Ensure you have python installed in your computer if you does not have install it by visiting python official website.
  2. Install pip which comes with python in default. navigate in the terminal to determine its version by running pip --version
  3. Install virtual environment

    Virtualenv is a tool to create isolated Python environments.


    pip install virtualenv

Enter fullscreen mode Exit fullscreen mode
  1. Install Django by running the following in terminal

    pip install django

Enter fullscreen mode Exit fullscreen mode

5.Create Django project


    django-admin startproject password-reset

Enter fullscreen mode Exit fullscreen mode

6.Navigate into the project folder by running


    cd password-reset

Enter fullscreen mode Exit fullscreen mode

7.Run code . in your terminal to run your project in your code editor

Creating a sub app in the Django app

  1. Create a Django App:
    • Use the manage.py script to create a new app:

    python manage.py startapp myapp

Enter fullscreen mode Exit fullscreen mode
  1. Configure the Django Project

  2. Add the App to INSTALLED_APPS:

    • Open mysite/settings.py and add your new app (myapp) to the INSTALLED_APPS list:

    INSTALLED_APPS = [
        ...
        'myapp',
    ]

Enter fullscreen mode Exit fullscreen mode
  1. Create Initial Views

a. Create a View:
- Open myapp/views.py and create a simple view:


    from django.http import HttpResponse

    def index(request):
        return HttpResponse("Hello, world. You're at the myapp index.")

Enter fullscreen mode Exit fullscreen mode

b. Map the View to a URL:
- Create a file named urls.py in the myapp directory and add the following code:


    from django.urls import path
    from . import views

    urlpatterns = [
        path('', views.index, name='index'),
    ]

Enter fullscreen mode Exit fullscreen mode

c. Include the App’s URL Configuration:
- Open mysite/urls.py and include the app's urls.py:


    from django.contrib import admin
    from django.urls import include, path

    urlpatterns = [
        path('admin/', admin.site.urls),
        path('myapp/', include('myapp.urls')),
    ]

Enter fullscreen mode Exit fullscreen mode
  1. Run the Development Server

a. Run the Server:
- Use the manage.py script to start the development server:


    python manage.py runserver

Enter fullscreen mode Exit fullscreen mode
  1. Access the App:
    • Open a web browser and go to http://127.0.0.1:8000/myapp/ to see your app in action.

Steps to implement user password Reset in Django

1.Configure Email Settings

Django relies on an external email service to send password reset emails. You’ll need to configure your email settings in the ‘settings.py’. This typically involves specifying:

  • EMAIL_BACKEND: The class responsible for sending emails
  • EMAIL_HOST: Your email provider's SMTP server address.
  • EMAIL_HOST_USER: Your email address used for sending emails.
  • EMAIL_HOST_PASSWORD: The password for your email account.
  • EMAIL_PORT: The SMTP port number for your email provider.
  • EMAIL_USE_TLS: (Optional) Enable TLS encryption for secure communication (recommended). Example

    EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend'
    EMAIL_HOST = 'smtp.example.com'
    EMAIL_PORT = 587
    EMAIL_USE_TLS = True
    EMAIL_HOST_USER = 'your_email@example.com'
    EMAIL_HOST_PASSWORD = 'your_email_password'
    DEFAULT_FROM_EMAIL = 'your_email@example.com'

Enter fullscreen mode Exit fullscreen mode

2.URL CONFIGURATION.

  • Set up the default URL settings patterns, in Django by handling password reset views. Make sure to add the django.contrib.auth.urls to your projects urls.py file. Code example in the ‘settings.py’

    from django.urls import path, include

    ur patterns = [
        ...
        path('accounts/', include('django.contrib.auth.urls')),
        ...
    ]

Enter fullscreen mode Exit fullscreen mode

3. Create Templates
This involves creating templates for the user to reset the password. They include the following:

a) Password reset request form:

  • It is a form template designed to allow users to request a password reset for their accounts.
  • Django provides a `PasswordResetForm’ for this purpose. You can customize this form or create your own based on your requirements.

example

`

Password reset request form

`

b. Password reset confirmation form

  • The Password Reset form contains an action that sends the user an email with a special SSO link to reset their password.

`

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Password Reset Done</title>
</head>
<body>
    <h2>Password Reset Email Sent</h2>
    <p>We've emailed you instructions for setting your password. If you haven't received the email, please check your spam folder.</p>
</body>
</html> 
Enter fullscreen mode Exit fullscreen mode

`

When a user submits the password reset form, the ‘PasswordResetView` handles the logic:

  • Validates the submitted email address against registered users.
  • Generates a unique password reset token using a cryptographically secure method.
  • Creates a password reset record associated with the user and the generated token.
  • Sends an email containing the reset link to the user's email address.

Confirmation email

c. Password reset email template

  • A password reset email template is a transactional email that is triggered when customers click on a “Forgot password?” link to reset the previous password.

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Password Reset Email</title>
</head>
<body>
    <h2>Password Reset</h2>
    <p>You're receiving this email because you requested a password reset for your account.</p>
    <p>Please click the link below to reset your password:</p>
    <p><a href="{{ protocol }}://{{ domain }}{% url 'password_reset_confirm' uidb64=uid token=token %}">Reset Password</a></p>
    <p>If you didn't request a password reset, you can safely ignore this email.</p>
</body>
</html>

Enter fullscreen mode Exit fullscreen mode

d. password reset form

  • The password reset form allows users who have forgotten their password to securely reset it. It verifies the user's identity through their email address and then prompts them to create a new password.

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Password Reset Confirm</title>
</head>
<body>
    <h2>Reset Password</h2>
    <form method="post">
        <code>{% csrf_token %}</code>
        <code>{{ form.as_p }}</code>
        <button type="submit">Continue</button>
    </form>
</body>
</html>

Enter fullscreen mode Exit fullscreen mode

e. Password reset complete form

  • It is a form that triggers the confirmation that the password has been reset and the user can login to the account using the new created password.

    <!DOCTYPE html>
    <html lang="en">
    <head>
        <meta charset="UTF-8">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>Password Reset Complete</title>
    </head>
    <body>
        <h2>Password Reset Successful</h2>
        <p>Your password has been successfully reset. You can now <a href="{% url 'login' %}">log in</a> with your new password.</p>
    </body>
    </html>

Enter fullscreen mode Exit fullscreen mode

4. Email Template

  • Customize the email template for the password reset email. Django uses a default text-based email template, but you can create your own HTML email template for a better user experience.

    PASSWORD_RESET_EMAIL_TEMPLATE = 'path_to_your_email_template.html'

Enter fullscreen mode Exit fullscreen mode

5. Testing

Thoroughly test the password reset functionality to ensure its correctness and security. Test scenarios should include:

  • User receives the password reset email.
  • User clicks on the reset link.
  • User successfully resets the password.

Conclusion

Django provides a robust built-in functionality for implementing user password reset with emails. This feature enhances user experience by allowing them to retrieve forgotten passwords easily. By configuring your email backend, defining URL patterns for the provided views, creating informative templates, and ensuring everything works through testing, you can establish a secure and user-friendly password reset system for your Django application.

References

https://youtu.be/whK97tOV2z4
https://django-password-reset.readthedocs.io/
https://docs.djangoproject.com/en/5.0/

MEMBER ROLES
All members participated generally in the discussion, conducting research and gathering information relevant to the group’s objective. Individual roles are as follows:

Name Role
1. Victor Kedenge - Created agendas and distributed to the team
- Scheduled and led the meeting.
- Coordinating among the group members
2.Julius Gichure - Creating templates responsible for resetting users password which includes:
- Password reset request form
- Password reset form
- Password reset confirmation
- Password reset complete
3.John Brown - Creating user login template and handling of its codes
- Configuring email settings
- URL Configurations
4. Beth Owala - Creating email template responsible for generating users reset link
- Performing conclusion
5.Abdirahman Aben - Conducted editing
- Taking notes
- Providing references
6.Sharon Imali




7. Moris Mutugi
- Attaching images
- Typing down notes on discussed points within the group members
- Adding video tutorials for further references

Top comments (0)