如何在Django中限制忘记密码重置尝试的次数？

# models.py
from django.db import models
from django.contrib.auth.models import User

class PasswordResetAttempt(models.Model):
    user = models.ForeignKey(User, on_delete=models.CASCADE)
    attempts = models.IntegerField(default=0)
    last_attempt_time = models.DateTimeField(null=True)

# forms.py
from django import forms
from django.contrib.auth.forms import PasswordResetForm
from django.utils import timezone
from .models import PasswordResetAttempt

class CustomPasswordResetForm(PasswordResetForm):
    def clean_email(self):
        email = self.cleaned_data.get('email')
        user = User.objects.filter(email=email).first()
        if user:
            reset_attempt = PasswordResetAttempt.objects.filter(user=user).first()
            if reset_attempt:
                max_attempts = 3  # 设置最大尝试次数
                last_attempt_limit = timezone.now() - timezone.timedelta(minutes=30)  # 设置最后尝试时间限制
                if reset_attempt.attempts >= max_attempts and reset_attempt.last_attempt_time >= last_attempt_limit:
                    raise forms.ValidationError("密码重置尝试次数过多，请稍后再试。")
            else:
                reset_attempt = PasswordResetAttempt(user=user)
            reset_attempt.attempts += 1
            reset_attempt.last_attempt_time = timezone.now()
            reset_attempt.save()
        return email

# views.py
from django.contrib.auth.views import PasswordResetView
from .forms import CustomPasswordResetForm

class CustomPasswordResetView(PasswordResetView):
    form_class = CustomPasswordResetForm

    def form_valid(self, form):
        response = super().form_valid(form)
        user = form.get_user()
        reset_attempt = PasswordResetAttempt.objects.filter(user=user).first()
        if reset_attempt:
            reset_attempt.attempts = 0
            reset_attempt.last_attempt_time = None
            reset_attempt.save()
        return response