[Python-modules-team] Bug#775363: python-django-registration: Uses wrong uid hash (uidb36 vs. uidb64) in auth_url.py for django >= 1.6 (breaks "reset password" URLs)

[Stephan Sürken]

Package: python-django-registration
Version: 1.0+dfsg-2
Severity: normal

Hi,

in auth_url.py, this line

url(r'^password/reset/confirm/(?P<uidb36>[0-9A-Za-z]+)-(?P<token>.+)/$',

should be replaced by this

url(r'^password/reset/confirm/(?P<uidb64>[0-9A-Za-z]+)-(?P<token>.+)/$',

to make "reset password URLs" work again (if the app uses
auth_url.py).

Users experiencing this bug right now may just add this new line
to their patterns _before_ including auth_url.py from
p-d-registration.

Afaiu, django has changed to use base64 starting with
django-1.6; as the auth_url.py already includes code only
working >= 1.6, no other compat needs to be applied imho.

[This is mostly for documentation purposes; hopefully I will add the fix myself ebentually ;). ]

Hth,

Stephan
-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-0.bpo.4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: unable to detect

Versions of packages python-django-registration depends on:
ii  libjs-sphinxdoc  1.2.3+dfsg-1
ii  python           2.7.8-2
ii  python-django    1.7.1-1

python-django-registration recommends no packages.

python-django-registration suggests no packages.

-- no debconf information