Skip to content

Commit

Permalink
Merge pull request #27 from ajabep/well-known-password-changer
Browse files Browse the repository at this point in the history
Add well known resource to change passwords

This allows to find the password to change a password.

More info @ https://w3c.github.io/webappsec-change-password-url
  • Loading branch information
ajabep authored Aug 2, 2023
2 parents 5ed16a3 + 45cebca commit f64ee55
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions src/app.py
Original file line number Diff line number Diff line change
Expand Up @@ -237,6 +237,12 @@ def robotstxt():
)


@app.get("/.well-known/change-password")
def password_changer_redirector():
"""https://w3c.github.io/webappsec-change-password-url/"""
return redirect(url_for('changepasswd'), code=302)


@app.get("/.well-known/security.txt")
def securitytxt():
"""Security.txt handler/generator"""
Expand Down

0 comments on commit f64ee55

Please sign in to comment.