Misago/misago/users/api/userendpoints/changepassword.py

from rest_framework import status
from rest_framework.response import Response

from django.utils.translation import gettext as _

from misago.core.mail import mail_user
from misago.users.credentialchange import store_new_credential
from misago.users.serializers import ChangePasswordSerializer


def change_password_endpoint(request, pk=None):
    serializer = ChangePasswordSerializer(
        data=request.data,
        context={'user': request.user},
    )

    if serializer.is_valid():
        token = store_new_credential(
            request, 'password', serializer.validated_data['new_password']
        )

        mail_subject = _("Confirm password change on %(forum_name)s forums")
        mail_subject = mail_subject % {'forum_name': request.settings.forum_name}

        mail_user(
            request.user,
            mail_subject,
            'misago/emails/change_password',
            context={
                "settings": request.settings,
                "token": token,
            },
        )

        return Response({
            'detail': _("Password change confirmation link was sent to your address.")
        })
    else:
        return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)