overleaf/services/web/app/coffee/Features/PasswordReset/PasswordResetRouter.coffee

PasswordResetController = require("./PasswordResetController")
AuthenticationController = require('../Authentication/AuthenticationController')

module.exports =
	apply: (webRouter, apiRouter) ->

		webRouter.get  '/user/password/reset', PasswordResetController.renderRequestResetForm
		webRouter.post  '/user/password/reset', PasswordResetController.requestReset
		AuthenticationController.addEndpointToLoginWhitelist '/user/password/reset'
		
		webRouter.get '/user/password/set', PasswordResetController.renderSetPasswordForm
		webRouter.post '/user/password/set', PasswordResetController.setNewUserPassword
		AuthenticationController.addEndpointToLoginWhitelist '/user/password/set'

		webRouter.post '/user/reconfirm', PasswordResetController.requestReset
added the token generator and its getNewToken function 2014-05-15 12:16:20 -04:00			`PasswordResetController = require("./PasswordResetController")`
allow password resets to be performed when site is not public by adding routes into white list 2015-04-30 06:58:26 -04:00			`AuthenticationController = require('../Authentication/AuthenticationController')`
added the token generator and its getNewToken function 2014-05-15 12:16:20 -04:00
written password reset handler 2014-05-15 11:20:23 -04:00			`module.exports =`
split site into 2 routers, webRouter and apiRouter web router has things like sessions etc added onto it. Api router is minimal, doesn't include things like csrf 2015-06-30 09:38:32 -04:00			`apply: (webRouter, apiRouter) ->`
written password reset handler 2014-05-15 11:20:23 -04:00
split site into 2 routers, webRouter and apiRouter web router has things like sessions etc added onto it. Api router is minimal, doesn't include things like csrf 2015-06-30 09:38:32 -04:00			`webRouter.get '/user/password/reset', PasswordResetController.renderRequestResetForm`
			`webRouter.post '/user/password/reset', PasswordResetController.requestReset`
allow password resets to be performed when site is not public by adding routes into white list 2015-04-30 06:58:26 -04:00			`AuthenticationController.addEndpointToLoginWhitelist '/user/password/reset'`
written password reset handler 2014-05-15 11:20:23 -04:00
split site into 2 routers, webRouter and apiRouter web router has things like sessions etc added onto it. Api router is minimal, doesn't include things like csrf 2015-06-30 09:38:32 -04:00			`webRouter.get '/user/password/set', PasswordResetController.renderSetPasswordForm`
			`webRouter.post '/user/password/set', PasswordResetController.setNewUserPassword`
allow password resets to be performed when site is not public by adding routes into white list 2015-04-30 06:58:26 -04:00			`AuthenticationController.addEndpointToLoginWhitelist '/user/password/set'`
written password reset handler 2014-05-15 11:20:23 -04:00
Merge pull request #1655 from sharelatex/jel-user-must-reconfirm Reconfirm user accounts GitOrigin-RevId: 0343ff745e881cd51b5efbfb97404b6b926905c8 2019-04-17 10:00:13 -04:00			`webRouter.post '/user/reconfirm', PasswordResetController.requestReset`