change password api

web_admin/serializers/auth_serializer.py

@@ -1,6 +1,7 @@
 """
 web_admin auth serializers file
 """
+# python imports
 from datetime import datetime
 
 # django imports
@@ -13,7 +14,6 @@ from templated_email import send_templated_mail
 
 # local imports
 from account.models import UserEmailOtp
-from account.utils import custom_error_response
 from base.messages import ERROR_CODE
 from guardian.tasks import generate_otp
 
@@ -21,9 +21,15 @@ USER = get_user_model()
 
 
 class AdminForgotPasswordSerializer(serializers.ModelSerializer):
-    email = serializers.EmailField(required=True)
+    """
+    admin forgot password serializer
+    """
+    email = serializers.EmailField()
 
     class Meta:
+        """
+        meta class
+        """
         model = USER
         fields = ('email',)
 
@@ -38,11 +44,12 @@ class AdminForgotPasswordSerializer(serializers.ModelSerializer):
         return attrs
 
     def create(self, validated_data):
+        """
+        to send otp
+        :return: user_data
+        """
         email = validated_data['email']
-        try:
-            USER.objects.get(email=email)
-        except USER.DoesNotExist:
-            return custom_error_response(ERROR_CODE['2004'], response_status=status.HTTP_404_NOT_FOUND)
+
         verification_code = generate_otp()
 
         # Send the verification code to the user's email
@@ -68,21 +75,88 @@ class AdminForgotPasswordSerializer(serializers.ModelSerializer):
 
 
 class AdminVerifyOTPSerializer(serializers.Serializer):
+    """
+    admin verify otp serializer
+    """
+    email = serializers.EmailField()
     otp = serializers.CharField(max_length=6, min_length=6)
 
     class Meta:
         """ meta class """
-        fields = ('otp',)
+        fields = ('email', 'otp',)
 
     def validate(self, attrs):
-        otp = attrs.pop('otp')
+        """
+        to validate data
+        :return: validated data
+        """
+        email = attrs.get('email')
+        otp = attrs.get('otp')
+
+        user = USER.objects.filter(email=attrs['email']).first()
+        if not user:
+            raise serializers.ValidationError(ERROR_CODE['2004'])
+        elif not user.is_superuser:
+            raise serializers.ValidationError(ERROR_CODE['2036'])
         # fetch email otp object of the user
-        user_opt_details = UserEmailOtp.objects.filter(otp=otp).last()
-        if not user_opt_details:
+        user_otp_details = UserEmailOtp.objects.filter(email=email, otp=otp).last()
+        if not user_otp_details:
             raise serializers.ValidationError(ERROR_CODE['2008'])
-        if user_opt_details.expired_at.replace(tzinfo=None) < datetime.utcnow():
+        if user_otp_details.expired_at.replace(tzinfo=None) < datetime.utcnow():
             raise serializers.ValidationError(ERROR_CODE['2029'])
-        user_details = USER.objects.filter(email=user_opt_details.email).last()
-        user_opt_details.delete()
-        if user_details:
+        user_otp_details.is_verified = True
+        user_otp_details.save()
+        return attrs
+
+
+class AdminCreatePasswordSerializer(serializers.ModelSerializer):
+    """
+    admin create new password serializer
+    """
+    email = serializers.EmailField()
+    new_password = serializers.CharField()
+    confirm_password = serializers.CharField()
+
+    class Meta:
+        """
+        meta class
+        """
+        model = USER
+        fields = ('email', 'new_password', 'confirm_password')
+
+    def validate(self, attrs):
+        """
+        to validate data
+        :return: validated data
+        """
+        email = attrs.get('email')
+        new_password = attrs.get('new_password')
+        confirm_password = attrs.get('confirm_password')
+
+        # matching password
+        if new_password != confirm_password:
+            raise serializers.ValidationError('password do not match')
+
+        user = USER.objects.filter(email=attrs['email']).first()
+        if not user:
+            raise serializers.ValidationError(ERROR_CODE['2004'])
+        elif not user.is_superuser:
+            raise serializers.ValidationError(ERROR_CODE['2036'])
+
+        user_otp_details = UserEmailOtp.objects.filter(email=email).last()
+
+        if user_otp_details and user_otp_details.is_verified:
+            user_otp_details.delete()
+            attrs.update({'user': user})
             return attrs
+        raise serializers.ValidationError(ERROR_CODE['2036'])
+
+    def create(self, validated_data):
+        """
+        to create password
+        :return: user
+        """
+        user = validated_data.get('user')
+        user.set_password(validated_data.get('password'))
+        user.save()
+        return user