From fcf76b4af87794ddf33f07d5e65be45604761cf5 Mon Sep 17 00:00:00 2001
From: Ludovic Stephan <lstephan@clipper.ens.fr>
Date: Sat, 7 Jan 2017 13:32:05 -0200
Subject: [PATCH] can change own password (actually working now)

---
 kfet/views.py | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/kfet/views.py b/kfet/views.py
index d0319c7f..c0f90034 100644
--- a/kfet/views.py
+++ b/kfet/views.py
@@ -464,6 +464,7 @@ def account_update(request, trigramme):
             account.refresh_from_db()
             user_form = UserRestrictForm(request.POST, instance=account.user)
             account_form = AccountRestrictForm(request.POST, instance=account)
+            pwd_form = AccountPwdForm(request.POST)
 
             if user_form.is_valid() and account_form.is_valid():
                 user_form.save()
@@ -472,6 +473,15 @@ def account_update(request, trigramme):
                 messages.success(request,
                                  'Vos informations ont été mises à jour')
 
+                if pwd_form.is_valid():
+                    pwd = pwd_form.cleaned_data['pwd1']
+                    pwd_sha256 = hashlib.sha256(pwd.encode('utf-8'))\
+                                        .hexdigest()
+                    Account.objects.filter(pk=account.pk).update(
+                            password=pwd_sha256)
+                    messages.success(
+                            request, 'Votre mot de passe a été mis à jour')
+
         if missing_perm:
             messages.error(request, 'Permission refusée')
         if success: