import os import smtplib import ssl from email.mime.text import MIMEText from email.mime.multipart import MIMEMultipart from itsdangerous import URLSafeTimedSerializer from ..database import SECRET_KEY # Configuration SMTP_SERVER = os.getenv("SMTP_SERVER") SMTP_PORT = int(os.getenv("SMTP_PORT", 465)) SMTP_USERNAME = os.getenv("SMTP_USERNAME") SMTP_PASSWORD = os.getenv("SMTP_PASSWORD") SMTP_FROM_EMAIL = os.getenv("SMTP_FROM_EMAIL") SMTP_USE_TLS = os.getenv("SMTP_USE_TLS", "True").lower() == "true" # Token Serializer serializer = URLSafeTimedSerializer(SECRET_KEY) def generate_password_reset_token(email: str) -> str: """Generates a safe token containing the email.""" return serializer.dumps(email, salt="password-recovery-salt") def verify_password_reset_token(token: str, expiration=3600) -> str | None: """Verifies the token and returns the email if valid and not expired.""" try: email = serializer.loads(token, salt="password-recovery-salt", max_age=expiration) return email except Exception: return None def send_password_reset_email(to_email: str, token: str, request_url_base: str): """Sends a password reset email securely via SMTP.""" reset_link = f"{request_url_base}/reset-password?token={token}" subject = "Recuperación de contraseña - Living4Football" html_content = f"""

Restablecer Contraseña

Hola,

Hemos recibido una solicitud para restablecer la contraseña de tu cuenta en Living4Football.

Si has sido tú, pulsa el siguiente botón para crear una nueva contraseña:

Restablecer Contraseña

O copia y pega este enlace en tu navegador:

{reset_link}

Si no has solicitado este cambio, puedes ignorar este correo. Tu contraseña seguirá siendo la misma.

""" msg = MIMEMultipart() msg["From"] = SMTP_FROM_EMAIL msg["To"] = to_email msg["Subject"] = subject msg.attach(MIMEText(html_content, "html")) try: context = ssl.create_default_context() with smtplib.SMTP_SSL(SMTP_SERVER, SMTP_PORT, context=context) as server: server.login(SMTP_USERNAME, SMTP_PASSWORD) server.sendmail(SMTP_FROM_EMAIL, to_email, msg.as_string()) print(f"Email sent to {to_email}") return True except Exception as e: print(f"Failed to send email: {e}") return False