"""passbook password_expiry_policy Models""" from datetime import timedelta from django.db import models from django.utils.timezone import now from django.utils.translation import gettext as _ from structlog import get_logger from passbook.core.models import Policy from passbook.policies.struct import PolicyRequest, PolicyResult LOGGER = get_logger() class PasswordExpiryPolicy(Policy): """If password change date is more than x days in the past, call set_unusable_password and show a notice""" deny_only = models.BooleanField(default=False) days = models.IntegerField() form = 'passbook.policies.expiry.forms.PasswordExpiryPolicyForm' def passes(self, request: PolicyRequest) -> PolicyResult: """If password change date is more than x days in the past, call set_unusable_password and show a notice""" actual_days = (now() - request.user.password_change_date).days days_since_expiry = (now() - (request.user.password_change_date + timedelta(days=self.days) )).days if actual_days >= self.days: if not self.deny_only: request.user.set_unusable_password() request.user.save() message = _(('Password expired %(days)d days ago. ' 'Please update your password.') % { 'days': days_since_expiry }) return PolicyResult(False, message) return PolicyResult(False, _('Password has expired.')) return PolicyResult(True) class Meta: verbose_name = _('Password Expiry Policy') verbose_name_plural = _('Password Expiry Policies')