783 remove unused (#784)
* chore: remove unused password reset endpoints and related logic * chore: remove unused import of PasswordResetToken from auth.py
taylor_socfortress committed
Apr 2, 2026 at 09:50 UTC
9f927a8577df60df58b0a19f0b908419b277833e
1 file changed
-53
backend/app/auth/routes/auth.py
-53
@@ -11,7 +11,6 @@ from loguru import logger
11
from sqlalchemy.ext.asyncio import AsyncSession
12
13
from app.auth.models.users import PasswordReset
14
-from app.auth.models.users import PasswordResetToken
14
from app.auth.models.users import RoleEnum
15
from app.auth.models.users import User
16
from app.auth.models.users import UserInput
@@ -259,58 +258,6 @@ async def get_users(session: AsyncSession = Depends(get_db)):
258
)
259
260
262
-# ! TODO: HAVE LOGIC TO HANDLE PASSWORD RESET VIA A TOKEN BUT NOT IMPLEMENTED YET ! #
263
-@auth_router.post(
264
- "/reset-token",
265
- status_code=200,
266
- description="Request password reset",
267
- include_in_schema=False,
268
- dependencies=[Security(AuthHandler().require_any_scope("admin"))],
269
-)
270
-async def request_password_reset(
271
- password_reset_request: PasswordResetToken,
272
- session: AsyncSession = Depends(get_db),
273
-):
274
- """
275
- Request a password reset.
276
-
277
- Args:
278
- password_reset_request (PasswordResetRequest): The password reset request data.
279
- session (AsyncSession, optional): The database session. Defaults to Depends(get_db).
280
-
281
- Returns:
282
- dict: A dictionary containing the reset token.
283
- """
284
- user = await find_user(password_reset_request.username)
285
- if not user:
286
- raise HTTPException(status_code=404, detail="User not found")
287
- reset_token = auth_handler.generate_reset_token(user.username)
288
- return {"reset_token": reset_token}
289
-
290
-
291
-# ! TODO: HAVE LOGIC TO HANDLE PASSWORD RESET VIA A TOKEN BUT NOT IMPLEMENTED YET ! #
292
-# @auth_router.post("/reset-password", status_code=200, description="Reset user's password", include_in_schema=False)
293
-# async def reset_password(password_reset: PasswordReset, session: AsyncSession = Depends(get_db)):
294
-# """
295
-# Reset a user's password.
296
-
297
-# Args:
298
-# password_reset (PasswordReset): The password reset data.
299
-# session (AsyncSession, optional): The database session. Defaults to Depends(get_db).
300
-
301
-# Returns:
302
-# dict: A dictionary containing the message and success status.
303
-# """
304
-# user = await find_user(password_reset.username)
305
-# if not user or not auth_handler.verify_reset_token(password_reset.reset_token, user.username):
306
-# raise HTTPException(status_code=404, detail="Invalid username or reset token")
307
-# hashed_pwd = auth_handler.get_password_hash(password_reset.new_password)
308
-# user.password = hashed_pwd
309
-# session.add(user)
310
-# await session.commit()
311
-# return {"message": "Password reset successfully", "success": True}
312
-
313
-
261
# Reset a user's password via the username, must be an admin
262
@auth_router.post(
263
"/reset-password",