a

tienda/tasks.py

@@ -4,7 +4,8 @@ from django.template.loader import render_to_string
 from django.core.mail import EmailMessage
 from .utilities import send_email, send_hemail
 from .vars import login_message, verify_message
-import random, string
+import secrets
+import string
 from . import pdf
 
 from .models import User, VerificationCode
@@ -43,7 +44,7 @@ def enviar_correo_confirmacion(id: int):
     code = VerificationCode.objects.create(
         user = usuario,
         code_mode = VerificationCode.VerificationModes.VERIFY_ACCOUNT,
-        code = ''.join(random.choices(string.digits, k=12))
+        code = ''.join(secrets.choice(string.digits) for _ in range(12))
     )
 
     message = verify_message.format(name = usuario.get_full_name(), protocol = settings.PROTOCOL, domain = settings.DOMAIN, code = code.code)
@@ -60,7 +61,7 @@ def enviar_correo_recuperacion(email: str):
         ver_code = VerificationCode.objects.create(
             code_mode = VerificationCode.VerificationModes.RESET_PASSWORD,
             user = usuario,
-            code = ''.join(random.choices(string.digits, k=12))
+            code = ''.join(secrets.choice(string.digits) for _ in range(12))
         )
         ver_code.save()
         html_content = render_to_string(

tienda/tests.py

@@ -16,6 +16,7 @@ from .models import (
 )
 from .forms import UserRegisterForm, UserLoginForm, EditProfileForm, ChangePasswordForm, ShippingAddressForm, ResetPasswordForm, ResetPasswordPhase2Form
 from .vars import VAT_RATE, TRANSACTION_CODE_PREFIX
+import secrets
 import string
 import random
 
@@ -335,7 +336,7 @@ class VerificationCodeModelTests(TestCase):
         """50 códigos pueden crearse sin conflictos."""
         codes = []
         for i in range(50):
-            mode = random.choice([
+            mode = secrets.choice([
                 VerificationCode.VerificationModes.VERIFY_ACCOUNT,
                 VerificationCode.VerificationModes.RESET_PASSWORD
             ])
@@ -377,7 +378,7 @@ class CategoryModelTests(TestCase):
         """100 categorías pueden crearse sin problemas."""
         categories = []
         for i in range(100):
-            cat = Category.objects.create(name=f"Category_{i}_{random.randint(1000, 9999)}")
+            cat = Category.objects.create(name=f"Category_{i}_{1000 + secrets.randbelow(9000)}")
             categories.append(cat)
         
         self.assertEqual(len(categories), 100)