我个人使用rest_framework_simplejwt生成一个令牌，并发送一封带有URL和令牌的电子邮件到忘记密码请求的电子邮件。然后在新的URL上提交新密码并解码令牌以获取用户并更改密码。

用户模型

在这里，您可以访问刷新和访问令牌，但我们需要的是访问令牌。

from django.db import models
from django.contrib.auth.models import (
    AbstractBaseUser, BaseUserManager, PermissionsMixin)
from rest_framework_simplejwt.tokens import RefreshToken
import uuid

class User(AbstractBaseUser, PermissionsMixin):
    public_id = models.CharField(
        max_length=255, default=uuid.uuid4, editable=False, unique=True)
    username = models.CharField(max_length=60, unique=True)
    email = models.EmailField(max_length=50, unique=True)
    firstname = models.CharField(max_length=250, null=False)
    lastname= models.CharField(max_length=250, null=False)
    password = models.CharField(max_length=250, null=False)
    is_superuser = models.BooleanField(default=False)
    is_verified = models.BooleanField(default=False)
    is_active = models.BooleanField(default=True)
    last_login = models.DateTimeField(null=True)
    created_at = models.DateTimeField(auto_now_add=True, null=False)

    USERNAME_FIELD = 'email'
    REQUIRED_FIELDS = ['username', 'firstname', 'lastname']

    def __str__(self):
        return self.username+'( '+self.email+' )'

    def tokens(self):
        refresh = RefreshToken.for_user(self)
        return {
            'refresh': str(refresh),
            'access': str(refresh.access_token)
        }

    class Meta:
        db_table = 'users'
        ordering = ('-id',)

忘记密码查看

您可以将**localhost：8000/set-password/**替换为设置密码端点的反向URL。找到用户后，将生成令牌并将其发送到用户的电子邮件。

class RequestPasswordResetEmail(generics.GenericAPIView):
    serializer_class = ResetPasswordEmailRequestSerializer

    def post(self, request,  *args, **kwargs):
        try:
            user = User.objects.get(email=request.data['email'])
            token = RefreshToken.for_user(user).access_token
            absurl = "localhost:8000/set-password/?token="+str(token)
            htmly = get_template('emailTemplates/forgotPassword.html')
            context = {'firstname': user.firstname,
                       "absurl": absurl}
            html_content = htmly.render(context)
            msg = EmailMessage(subject='Password Reset', body=html_content,
                               to=[user.email],
                               from_email=os.environ['EMAIL_SEND_AS'])
            msg.content_subtype = "html"
            msg.send()
            data = {'status': status.HTTP_200_OK, 'msg': 'Email Sent.'}
        except User.DoesNotExist:
            data = {'status': status.HTTP_200_OK, 'msg': 'Email Sent.'}
        return HttpResponse(json.dumps(data))

设置密码视图

对令牌进行解码以获得更改的用户ID和用户密码，否则给出正确的响应。

class SetAccountPasswordAPIView(generics.RetrieveAPIView):
    serializer_class = EmailVerificationSerializer

    def get(self, request):
        token = request.GET.get('token')
        try:
            payload = jwt.decode(
                token, settings.SECRET_KEY, algorithms='HS256')
            user = User.objects.get(id=payload['user_id'])
            user.set_password(request.data['password'])
            user.save()
            return Response({'message': 'Password Set Successfully'},
                                status=status.HTTP_200_OK)
        except jwt.ExpiredSignatureError:
            return Response({'message': 'Token Has Expired'},
                            status=status.HTTP_400_BAD_REQUEST)
        except jwt.exceptions.DecodeError:
            return Response({'message': 'Invalid Token'},
                            status=status.HTTP_400_BAD_REQUEST)