Passwort-zurücksetzen, Passwort-ändern, Account-löschen!

django/accounts/views.py

@@ -2,7 +2,10 @@ from django.shortcuts import render, redirect
 from django.contrib.auth.decorators import login_required
 from django.contrib.auth import login, authenticate
 from .forms import RegisterForm
-
+from django.contrib.auth.forms import PasswordChangeForm
+from django.contrib.auth import update_session_auth_hash
+from django.contrib import messages
+from django.contrib.auth import logout
 # Create your views here.
 @login_required
 def home(request):
@@ -18,4 +21,34 @@ def register(response):
     else:
         form = RegisterForm()
 
-    return render(response, "accounts/register.html", {"form":form})
+    return render(response, "accounts/register.html", {"form":form})
+
+from django.contrib.auth import views as auth_views
+
+@login_required
+def password_changed(request):
+    if request.method == 'POST':
+        form = PasswordChangeForm(user=request.user, data=request.POST)
+        if form.is_valid():
+            #user = form.save()
+            #update_session_auth_hash(request, user) #Hier wäre der User nach Passwortänderung noch angemeldet!
+            logout(request)
+            messages.success(request, "Das Passwort wurde erfolgreich geändert!")
+            return redirect('accounts:home')
+            
+    else:
+        form = PasswordChangeForm(user=request.user)
+    
+    return render(request, 'registration/password_change_form.html', {'form': form})
+
+
+@login_required
+def deleteAccount(request):
+    if request.method == 'POST':
+        user=request.user
+        logout(request)
+        user.delete()
+        messages.success(request, "Der Account wurde erfolgreich gelöscht!")
+        return redirect('homepage:home')
+    return render(request, 'registration/delete_account_confirm.html')
+