django.git/docs/topics/auth/default.txt, branch 5.0.10

[5.0.x] Fixed CVE-2024-45231 -- Avoided server error on password reset when email sending fails.

2024-09-03T12:33:01Z

On successful submission of a password reset request, an email is sent to the accounts known to the system. If sending this email fails (due to email backend misconfiguration, service provider outage, network issues, etc.), an attacker might exploit this by detecting which password reset requests succeed and which ones generate a 500 error response. Thanks to Thibaut Spriet for the report, and to Mariusz Felisiak, Adam Johnson, and Sarah Boyce for the reviews.

[5.0.x] Applied Black's 2024 stable style.

2024-01-26T11:55:56Z

https://github.com/psf/black/releases/tag/24.1.0 Backport of 305757aec19c9d5111e4d76095ae0acd66163e4b from main

[5.0.x] Fixed typo in docs/topics/auth/default.txt.

2024-01-22T16:43:46Z

Backport of 8570e091d025c4aacc6b76597a3322030c2f8162 from main

Refs #15619 -- Removed deprecated annotation about logging out via GET requests.

2023-09-14T17:49:06Z

Follow up to 6c57c08ae52f86df843fccb5a3c1c6c45a10a26f.

Fixed #34391 -- Added async-compatible interface to auth functions and related methods test clients.

2023-06-27T09:17:17Z

Used extlinks for PyPI links.

2023-04-17T04:55:32Z

Co-authored-by: Mariusz Felisiak

Fixed #31920 -- Made AuthenticationMiddleware add request.auser().

2023-03-07T12:11:22Z

Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01T12:03:56Z

Refs #34140 -- Corrected rst code-block and various formatting issues in docs.

2023-02-28T11:21:37Z

Refs #34140 -- Applied rst code-block to non-Python examples.

2023-02-10T18:19:13Z

Thanks to J.V. Zammit, Paolo Melchiorre, and Mariusz Felisiak for reviews.