[ENG-9994][ENG-12168] Add API endpoint/view for resend confirmation URL

api/users/urls.py

@@ -5,6 +5,7 @@
 
 urlpatterns = [
     re_path(r'^reset_password/$', views.ResetPassword.as_view(), name=views.ResetPassword.view_name),
+    re_path(r'^resend_confirmation/$', views.ResendConfirmation.as_view(), name=views.ResendConfirmation.view_name),
     re_path(r'^external_login_comfirm_email/$', views.ExternalLoginConfirmEmailView.as_view(), name=views.ExternalLoginConfirmEmailView.view_name),
     re_path(r'^external_login/$', views.ExternalLogin.as_view(), name=views.ExternalLogin.view_name),
     re_path(r'^$', views.UserList.as_view(), name=views.UserList.view_name),

api/users/views.py

@@ -935,6 +935,65 @@ def post(self, request, *args, **kwargs):
             content_type='application/vnd.api+json; application/json',
         )
 
+class ResendConfirmation(JSONAPIBaseView, generics.ListCreateAPIView):
+    """
+      View for handling resend confirmation URL requests.
+
+      GET:
+      - Takes an email as a query parameter.
+      - If the email is not provided or invalid, returns a validation error.
+      - If the user has recently requested a resend URL, returns a throttling error.
+      """
+    permission_classes = (
+        drf_permissions.AllowAny,
+    )
+    view_category = 'users'
+    view_name = 'request-resend-confirmation'
+    throttle_classes = (NonCookieAuthThrottle, BurstRateThrottle, RootAnonThrottle, SendEmailThrottle)
+
+    def get(self, request, *args, **kwargs):
+        email = request.query_params.get('email', None)
+        if not email:
+            raise ValidationError('Request must include email in query params.')
+
+        status_message = language.RESEND_CONFIRMATION_SUCCESS_STATUS_MESSAGE.format(email=email)
+        # check if the user exists
+        user_obj = get_user(email=email)
+
+        if user_obj:
+            # rate limit resend_confirmation_post
+            if not throttle_period_expired(user_obj.email_last_sent, settings.SEND_EMAIL_THROTTLE):
+                return Response(
+                    {
+                        'message': language.THROTTLE_RESEND_CONFIRMATION_ERROR_MESSAGE,
+                        'kind': 'error',
+                    },
+                    status=status.HTTP_429_TOO_MANY_REQUESTS,
+                )
+            else:
+                notification_type = NotificationTypeEnum.USER_INITIAL_CONFIRM_EMAIL
+                confirmation_url = user_obj.get_confirmation_url(
+                    email,
+                    external=True,
+                    force=True,
+                    renew=False,
+                )
+                notification_type.instance.emit(
+                    destination_address=email,
+                    event_context={
+                        'user_fullname': user_obj.fullname,
+                        'confirmation_url': f'{confirmation_url}',
+                    },
+                    save=False,
+                )
+
+        return Response(
+            status=status.HTTP_200_OK,
+            data={
+                'message': status_message,
+                'kind': 'success',
+            },
+        )
 
 class UserSettings(JSONAPIBaseView, generics.RetrieveUpdateAPIView, UserMixin):
     permission_classes = (

website/language.py

@@ -222,6 +222,14 @@
 THROTTLE_PASSWORD_CHANGE_ERROR_MESSAGE = \
     'You have recently requested to change your password. Please wait a few minutes before trying again.'
 
+RESEND_CONFIRMATION_SUCCESS_STATUS_MESSAGE = (
+    'If there is an OSF account associated with {email}, an confirmation link has been sent to {email}.'
+    'If you do not receive an email and believe you should have, please contact OSF Support. '
+)
+
+THROTTLE_RESEND_CONFIRMATION_ERROR_MESSAGE = \
+    'You have recently requested to resend your confirmation link. Please wait a few minutes before trying again.'
+
 SANCTION_STATUS_MESSAGES = {
     'registration': {
         'approve': 'Your registration approval has been accepted.',