Password change and reset in Django - Step-by-Step Execution

Concept Flow - Password change and reset

User requests password change/reset

↓

System sends email with token link

↓

User clicks link and opens reset form

↓

User enters new password

↓

System validates token and password

↓

Password updated in database

↓

User notified of success

↓

END

This flow shows how Django handles password change and reset by sending a token link, validating it, and updating the password.

Execution Sample

Django

from django.contrib.auth.views import PasswordResetView
from django.urls import path

urlpatterns = [
  path('reset/', PasswordResetView.as_view(), name='password_reset'),
]

This code sets up a URL route to start the password reset process by sending an email with a reset link.

Execution Table

Step	Action	Input/State	Output/Result
1	User requests password reset	User enters email	System checks if email exists
2	System sends reset email	Valid email found	Email sent with token link
3	User clicks reset link	Token in URL	System shows password reset form
4	User submits new password	New password entered	System validates token and password
5	System updates password	Valid token and password	Password changed in database
6	System confirms success	Password updated	User sees success message
7	Process ends	Password reset complete	User can now login with new password

💡 Process ends after password is successfully updated and user is notified.

Variable Tracker

Variable	Start	After Step 1	After Step 2	After Step 4	After Step 5	Final
email_entered	None	[e-mail]	[e-mail]	[e-mail]	[e-mail]	[e-mail]
token_valid	False	False	False	True	True	True
password_new	None	None	None	new_password123	new_password123	new_password123
password_updated	False	False	False	False	True	True

Key Moments - 3 Insights

Why does the system send an email before showing the reset form?

The email contains a secure token link to verify the user's identity before allowing password reset, as shown in steps 2 and 3 of the execution_table.

What happens if the token is invalid or expired?

The system will not update the password and will show an error, preventing unauthorized changes. This is implied in step 4 where token validation occurs.

Why do we track the 'password_updated' variable?

It confirms the password was successfully changed in the database, marking the process completion as seen in step 5 and 6.

Visual Quiz - 3 Questions

Look at the execution_table, what is the system's action at step 3?

A System sends reset email

B User clicks reset link and system shows reset form

C User submits new password

D System updates password

💡 Hint

Check the 'Action' column for step 3 in the execution_table.

At which step does the system validate the token and new password?

A Step 4

B Step 3

C Step 2

D Step 5

💡 Hint

Look for 'validates token and password' in the 'Action' column.

If the token was invalid, which variable in variable_tracker would remain False?

A password_new

B email_entered

C token_valid

D password_updated

💡 Hint

Refer to the 'token_valid' row in variable_tracker to see its value changes.

Concept Snapshot

Django password reset flow:
1. User requests reset by email.
2. System sends email with token link.
3. User clicks link, opens reset form.
4. User enters new password.
5. System validates token and updates password.
6. User notified of success.

Full Transcript

This visual execution shows how Django handles password change and reset. First, the user requests a password reset by entering their email. The system checks if the email exists and sends a reset email with a secure token link. When the user clicks the link, the system shows a password reset form. The user enters a new password, and the system validates the token and password. If valid, the password is updated in the database, and the user is notified of success. Variables like email_entered, token_valid, password_new, and password_updated track the process state. Key moments include why the email is sent first, token validation importance, and confirming password update. The quizzes test understanding of each step and variable state.