{"categories":[{"label":"WWW/HTTP","url":"https://skillfed.io/packages/category/internet-www-http/4"},{"label":"Dynamic Content","url":"https://skillfed.io/packages/category/internet-www-http-dynamic-content/2"}],"enrichment":{"capability":"Provides REST API endpoints for Django applications to handle password reset requests and confirmations, with token-based verification and signal-driven delivery (email, SMS, etc.).","skillfed_tags":["django-rest-framework","authentication","password-reset"],"use_cases":["Add a self-service password reset flow to a Django REST API without building token management from scratch.","Send password reset links via email by connecting to the reset_password_token_created signal.","Validate reset tokens before allowing password changes, with automatic expiry and cleanup.","Prevent account enumeration attacks by returning generic responses for invalid, expired, or missing tokens.","Schedule periodic cleanup of expired tokens using the included management command to keep the database lean."],"what_it_does":"Django-rest-passwordreset is a Django REST Framework extension that adds password reset functionality via REST endpoints. It provides two main endpoints: one to request a reset token (sent to a registered email) and another to verify the token and set a new password. The package does not assume how tokens are delivered\u2014instead, it fires Django signals when tokens are created or used, allowing you to hook in your own delivery mechanism (email, SMS, push notification, etc.).\n\nThe package stores tokens in a database table with configurable expiry (default 24 hours) and includes a management command for periodic cleanup of expired tokens. It handles security concerns like token validation, expiration checking, and optional information-leakage prevention to avoid revealing whether an account exists. You integrate it by adding it to INSTALLED_APPS, running migrations, including its URL patterns, and connecting signal handlers to send notifications.","worth_installing":"Yes. This is a production-stable, actively maintained package with zero dependencies and low install friction. It solves a common Django problem (password reset) with a clean signal-based design that lets you control delivery. No known vulnerabilities. Use it unless you need highly custom password reset logic that the signal system cannot accommodate."},"id":"django-rest-passwordreset","links":{"html":"https://skillfed.io/packages/django-rest-passwordreset","md":"https://skillfed.io/packages/django-rest-passwordreset.md","pypi":"https://pypi.org/project/django-rest-passwordreset/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-06-29","license_spdx":null,"license_treatment":"permissive","name":"django-rest-passwordreset","python_support":"unspecified","summary":"An extension of django rest framework, providing a configurable password reset strategy"},"popularity":{"monthly_downloads":371827,"position":7169,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.6.0"}