Notes

serilizers.py
class PasswordResetSerializer(serializers.Serializer):
email = serializers.EmailField()

def validate_email(self, value):
if not User.objects.filter(email=value).exists():
raise serializers.ValidationError("No user is associated with this email address.")
return value

def save(self):
email = self.validated_data['email']
user = User.objects.get(email=email)
# Generate a password reset token
token = get_random_string(length=32)
PasswordResetToken.objects.create(user=user, token=token)
# Send email (you need to configure your email settings)
send_mail(
'Password Reset Request',
f'Use this token to reset your password: {token}',
'[email protected]',
[email],
fail_silently=False,
)


class PasswordResetConfirmSerializer(serializers.Serializer):
token = serializers.CharField()
new_password = serializers.CharField(write_only=True)
confirm_password = serializers.CharField(write_only=True)

def validate(self, data):
if data['new_password'] != data['confirm_password']:
raise serializers.ValidationError("Passwords do not match.")

# Validate the token and retrieve the user
try:
password_reset_token = PasswordResetToken.objects.get(token=data['token'])
user = password_reset_token.user
except PasswordResetToken.DoesNotExist:
raise serializers.ValidationError("Invalid token or user not found.")

# Optionally, you can also check if the token has expired
return data

def save(self):
# Retrieve the user using the token
token = self.validated_data['token']
password_reset_token = PasswordResetToken.objects.get(token=token)
user = password_reset_token.user
user.set_password(self.validated_data['new_password'])
user.save()
# Optionally, delete the token after use
password_reset_token.delete()

views.py

class PasswordResetView(generics.GenericAPIView):
serializer_class = PasswordResetSerializer

def post(self, request):
serializer = self.get_serializer(data=request.data)
serializer.is_valid(raise_exception=True)
serializer.save()
return Response({"message": "Password reset email sent."}, status=200)


class PasswordResetConfirmView(generics.GenericAPIView):
serializer_class = PasswordResetConfirmSerializer

def post(self, request):
serializer = self.get_serializer(data=request.data)
try:
serializer.is_valid(raise_exception=True)
serializer.save()
return Response({"message": "Password has been reset successfully."}, status=status.HTTP_200_OK)
except Exception as e:
return Response({"error": str(e)}, status=status.HTTP_500_INTERNAL_SERVER_ERROR)