Merge pull request #1459 from bookwyrm-social/password-reset

Prevent password reset for inactive users
2021-09-27 12:55:05 -07:00
parent eb34bb2d93 8b0a8e2611
commit 6d2403bbc7
2 changed files with 5 additions and 1 deletions
--- a/bookwyrm/views/password.py
+++ b/bookwyrm/views/password.py
@ -27,7 +27,9 @@ class PasswordResetRequest(View):
        """create a password reset token"""
        email = request.POST.get("email")
        try:
-            user = models.User.objects.get(email=email, email__isnull=False)
+            user = models.User.viewer_aware_objects(request.user).get(
+                email=email, email__isnull=False
+            )
        except models.User.DoesNotExist:
            data = {"error": _("No user with that email address was found.")}
            return TemplateResponse(request, "password_reset_request.html", data)