"
+
+ @staticmethod
+ def hash_token(token: str) -> str:
+ """Hash a token using SHA256."""
+ return hashlib.sha256(token.encode()).hexdigest()
+
+ @classmethod
+ def create_for_customer(cls, db: Session, customer_id: int) -> str:
+ """Create a new password reset token for a customer.
+
+ Invalidates any existing tokens for the customer.
+ Returns the plaintext token (to be sent via email).
+ """
+ # Invalidate existing tokens for this customer
+ db.query(cls).filter(
+ cls.customer_id == customer_id,
+ cls.used_at.is_(None),
+ ).delete()
+
+ # Generate new token
+ plaintext_token = secrets.token_urlsafe(32)
+ token_hash = cls.hash_token(plaintext_token)
+
+ # Create token record
+ token = cls(
+ customer_id=customer_id,
+ token_hash=token_hash,
+ expires_at=datetime.utcnow() + timedelta(hours=cls.TOKEN_EXPIRY_HOURS),
+ )
+ db.add(token)
+ db.flush()
+
+ return plaintext_token
+
+ @classmethod
+ def find_valid_token(cls, db: Session, plaintext_token: str) -> "PasswordResetToken | None":
+ """Find a valid (not expired, not used) token."""
+ token_hash = cls.hash_token(plaintext_token)
+
+ return db.query(cls).filter(
+ cls.token_hash == token_hash,
+ cls.expires_at > datetime.utcnow(),
+ cls.used_at.is_(None),
+ ).first()
+
+ def mark_used(self, db: Session) -> None:
+ """Mark this token as used."""
+ self.used_at = datetime.utcnow()
+ db.flush()
diff --git a/scripts/seed_email_templates.py b/scripts/seed_email_templates.py
index d9ed0001..3871103d 100644
--- a/scripts/seed_email_templates.py
+++ b/scripts/seed_email_templates.py
@@ -653,6 +653,249 @@ Liwweradress:
Dir kritt eng weider E-Mail wann Ăr Bestellung verschĂ©ckt gĂ«tt.
Merci fir Ăren Akaf!
+""",
+ },
+ # -------------------------------------------------------------------------
+ # PASSWORD RESET
+ # -------------------------------------------------------------------------
+ {
+ "code": "password_reset",
+ "language": "en",
+ "name": "Password Reset",
+ "description": "Sent to customers when they request a password reset",
+ "category": EmailCategory.AUTH.value,
+ "variables": json.dumps([
+ "customer_name", "reset_link", "expiry_hours"
+ ]),
+ "subject": "Reset Your Password",
+ "body_html": """
+
+
+
+
+
+
+
+
Reset Your Password
+
+
+
+
Hi {{ customer_name }},
+
+
We received a request to reset your password. Click the button below to create a new password:
+
+
+
+
+ This link will expire in {{ expiry_hours }} hour(s). If you didn't request this password reset, you can safely ignore this email.
+
+
+
+ If the button doesn't work, copy and paste this link into your browser:
+ {{ reset_link }}
+
+
+
Best regards,
The Team
+
+
This is an automated email. Please do not reply directly.
+
+
Reinitialiser votre mot de passe
+
+
+
+
Bonjour {{ customer_name }},
+
+
Nous avons recu une demande de reinitialisation de votre mot de passe. Cliquez sur le bouton ci-dessous pour creer un nouveau mot de passe :
+
+
+
+
+ Ce lien expirera dans {{ expiry_hours }} heure(s). Si vous n'avez pas demande cette reinitialisation, vous pouvez ignorer cet email.
+
+
+
+ Si le bouton ne fonctionne pas, copiez et collez ce lien dans votre navigateur :
+ {{ reset_link }}
+
+
+
Cordialement,
L'equipe
+
+
Passwort zurucksetzen
+
+
+
+
Hallo {{ customer_name }},
+
+
Wir haben eine Anfrage zur Zurucksetzung Ihres Passworts erhalten. Klicken Sie auf die Schaltflache unten, um ein neues Passwort zu erstellen:
+
+
+
+
+ Dieser Link lauft in {{ expiry_hours }} Stunde(n) ab. Wenn Sie diese Passwortzurucksetzung nicht angefordert haben, konnen Sie diese E-Mail ignorieren.
+
+
+
+ Wenn die Schaltflache nicht funktioniert, kopieren Sie diesen Link in Ihren Browser:
+ {{ reset_link }}
+
+
+
Mit freundlichen Grussen,
Das Team
+
+
Passwuert zrecksetzen
+
+
+
+
Moien {{ customer_name }},
+
+
Mir hunn eng Ufro kritt fir Aert Passwuert zreckzesetzen. Klickt op de KnÀppchen hei drënner fir en neit Passwuert ze kreéieren:
+
+
+
+
+ Dëse Link leeft an {{ expiry_hours }} Stonn(en) of. Wann Dir dës Passwuertzrecksetzung net ugefrot hutt, kënnt Dir dës E-Mail ignoréieren.
+
+
+
+ Wann de KnĂ€ppchen net fonctionnĂ©iert, kopĂ©iert dĂ«se Link an Ăre Browser:
+ {{ reset_link }}
+
+
+
Mat beschte Gréiss,
D'Team
+
+ {% else %}
+