core: add key field to token for easier rotation

2020-10-18 14:34:22 +02:00
parent 36e095671c
commit ee670d5e19
18 changed files with 168 additions and 361 deletions
--- a/passbook/admin/views/users.py
+++ b/passbook/admin/views/users.py
@ -158,7 +158,7 @@ class UserPasswordResetView(LoginRequiredMixin, PermissionRequiredMixin, DetailV
        token, _ = Token.objects.get_or_create(
            identifier="password-reset-temp", user=self.object
        )
-        querystring = urlencode({"token": token.token_uuid})
+        querystring = urlencode({"token": token.key})
        link = request.build_absolute_uri(
            reverse("passbook_flows:default-recovery") + f"?{querystring}"
        )