Implement email for password reset about baobab HOT 15 CLOSED

I don't think we should host our own - too easy to get classified as Spam... Mandrill looks good, the block pricing will definitely be more reasonable for us and we already use Mailchimp - will get the Mailchimp account details and sign up for Mandrill

from baobab.

@avishkar58 @KaleabTessera

Any suggestion on mail servers?

• We could host our own
• We could use sendgrid (but they have a pricetag depending on usage. for the first 90 days its free up to 40 000 emails. Then it's 100 per day for free. If this is to largely be used for communication with all attendees, not a great idea)
• We could use mandrill (their pricing is WAY more reasonable. works on a credit based system. http://mandrill.com/pricing/ $20 per block - which is 25 000 emails)

from baobab.

@avishkar58 once mandrill account details are setup, I will take this task up to send email for password reset.

from baobab.

Hmm... so hidden costs - you can only use Mandrill if you have a monthly plan with Mailchimp! Argh! Will compare with other options on that basis and feedback...

from baobab.

@avishkar58 Amazon Simple Email Service seems like a good alternative too. 62k free outgoing emails per month, and 1k free incoming emails per month.

from baobab.

@Carvalho96v2 NICE! Thanks for sending that - we probably won't be hosting in EC2 (because we can most likely get some credits for GCP), so won't get the 62k free emails, but even at "$0.10 for every 1,000 emails you send" - it seems very reasonable! Will set it up asap

from baobab.

So I've signed up for Amazon SES - we're currently in Sandbox mode, so can only send to verified email addresses. I'll add the emails of everyone in this thread for now - please respond to the verification email you get from Amazon. I'll also email you all the SMTP credentials.

Docs:
Python API, API Reference

from baobab.

On it!

from baobab.

Hello @jaderabbit , @avishkar58 :

Here is the PR for supporting email for password reset : #26

If you already have a template for what the email should contain, I will add it in the TODO section of the api, currently have a provided an implementation for sending email via amazon ses.

from baobab.

@jaderabbit , @avishkar58 - any updates on this? I can fix that as part of some fixes in the PR. What should the password reset mail point to, or should it just say, thank you, your password has been reset and a link to login?

from baobab.

Yeah I don't think it matters too much - whatever you think is sensible for the email is fine :)

from baobab.

@jaderabbit - Should I point to any link for resetting password once the user wants to reset their password?

from baobab.

@nischalhp I don't know if we have an actual front-end yet. @KaleabTessera ?
You'll need to email them a token and then setup the end points for resetting

from baobab.

@nischalhp So yeah, no front-end for reset password yet, but let's use this as the link for resetting password - [WebsiteUrl]/ResetPassword?resetToken=[reset_password_token].

Then the front end would pass this token to the backend. Then the backend uses it to auth the user and then resets the password according. Is that the workflow you had in mind?

from baobab.

@KaleabTessera - Yes, that sounds good. So when a user resets his password, he gets an email with the above mentioned url, that he can later use to reset it.
Also the reset token, it needs to be generated and added to database? @jaderabbit

from baobab.