<feed xmlns='http://www.w3.org/2005/Atom'>
<title>django.git/docs/topics/auth/default.txt, branch 6.0.2</title>
<subtitle>django
</subtitle>
<id>http://cgit.adnoto.dev/django.git/atom?h=6.0.2</id>
<link rel='self' href='http://cgit.adnoto.dev/django.git/atom?h=6.0.2'/>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/'/>
<updated>2025-08-25T13:51:10Z</updated>
<entry>
<title>Refs #36485 -- Rewrapped docs to 79 columns line length.</title>
<updated>2025-08-25T13:51:10Z</updated>
<author>
<name>David Smith</name>
<email>smithdc@gmail.com</email>
</author>
<published>2025-07-25T09:24:17Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=f81e6e3a53ee36e3f730a71aa55a5744982dd016'/>
<id>urn:sha1:f81e6e3a53ee36e3f730a71aa55a5744982dd016</id>
<content type='text'>
Lines in the docs files were manually adjusted to conform to the
79 columns limit per line (plus newline), improving readability and
consistency across the content.
</content>
</entry>
<entry>
<title>Refs #36485 -- Removed double spaces after periods in sentences.</title>
<updated>2025-08-25T13:51:10Z</updated>
<author>
<name>Natalia</name>
<email>124304+nessita@users.noreply.github.com</email>
</author>
<published>2025-08-22T15:36:48Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=4286a23df64f6ce3b9b6ed097f4d1aac7d9e0de4'/>
<id>urn:sha1:4286a23df64f6ce3b9b6ed097f4d1aac7d9e0de4</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Refs #36485 -- Removed unnecessary parentheses in :meth: and :func: roles in docs.</title>
<updated>2025-08-25T13:51:10Z</updated>
<author>
<name>David Smith</name>
<email>smithdc@gmail.com</email>
</author>
<published>2025-05-27T16:37:22Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=6f8e23d1c10c7ce32cea82b65ad2af640015f147'/>
<id>urn:sha1:6f8e23d1c10c7ce32cea82b65ad2af640015f147</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Removed versionadded/changed annotations for 5.1.</title>
<updated>2025-01-15T21:28:37Z</updated>
<author>
<name>Sarah Boyce</name>
<email>42296566+sarahboyce@users.noreply.github.com</email>
</author>
<published>2024-12-12T15:17:09Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=810edfd7428e12bd640573112c6c1a024ac33da2'/>
<id>urn:sha1:810edfd7428e12bd640573112c6c1a024ac33da2</id>
<content type='text'>
This also removes remaining versionadded/changed annotations for older
versions.
</content>
</entry>
<entry>
<title>Fixed CVE-2024-45231 -- Avoided server error on password reset when email sending fails.</title>
<updated>2024-09-03T12:22:32Z</updated>
<author>
<name>Natalia</name>
<email>124304+nessita@users.noreply.github.com</email>
</author>
<published>2024-08-19T17:47:38Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=8c35a0a903fd979e3262fe300ca084ffbfb300d6'/>
<id>urn:sha1:8c35a0a903fd979e3262fe300ca084ffbfb300d6</id>
<content type='text'>
On successful submission of a password reset request, an email is sent
to the accounts known to the system. If sending this email fails (due to
email backend misconfiguration, service provider outage, network issues,
etc.), an attacker might exploit this by detecting which password reset
requests succeed and which ones generate a 500 error response.

Thanks to Thibaut Spriet for the report, and to Mariusz Felisiak, Adam
Johnson, and Sarah Boyce for the reviews.
</content>
</entry>
<entry>
<title>Sorted alphabetically forms list in docs/topics/auth/default.txt.</title>
<updated>2024-08-22T12:14:11Z</updated>
<author>
<name>nessita</name>
<email>124304+nessita@users.noreply.github.com</email>
</author>
<published>2024-08-22T12:14:11Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=7adb6dd98d50a238f3eca8c15b16b5aec12575fd'/>
<id>urn:sha1:7adb6dd98d50a238f3eca8c15b16b5aec12575fd</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Fixed #35678 -- Removed "usable_password" field from BaseUserCreationForm.</title>
<updated>2024-08-19T15:39:57Z</updated>
<author>
<name>Natalia</name>
<email>124304+nessita@users.noreply.github.com</email>
</author>
<published>2024-08-15T13:27:24Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=0ebed5fa95f53b87383901bbd9341ef3c974344f'/>
<id>urn:sha1:0ebed5fa95f53b87383901bbd9341ef3c974344f</id>
<content type='text'>
Refs #34429: Following the implementation allowing the setting of
unusable passwords via the admin site, the `BaseUserCreationForm` and
`UserCreationForm` were extended to include a new field for choosing
whether password-based authentication for the new user should be enabled
or disabled at creation time.
Given that these forms are designed to be extended when implementing
custom user models, this branch ensures that this new field is moved to
a new, admin-dedicated, user creation form `AdminUserCreationForm`.

Regression in e626716c28b6286f8cf0f8174077f3d2244f3eb3.

Thanks Simon Willison for the report, Fabian Braun and Sarah Boyce for
the review.
</content>
</entry>
<entry>
<title>Refs #31405 -- Improved LoginRequiredMiddleware documentation.</title>
<updated>2024-08-08T08:05:31Z</updated>
<author>
<name>Adam Johnson</name>
<email>me@adamj.eu</email>
</author>
<published>2024-08-08T06:10:13Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=49815f70e4508ae21135f725da177fc2935de32c'/>
<id>urn:sha1:49815f70e4508ae21135f725da177fc2935de32c</id>
<content type='text'>
co-authored-by: Sarah Boyce &lt;42296566+sarahboyce@users.noreply.github.com&gt;
</content>
</entry>
<entry>
<title>Removed versionadded/changed annotations for 5.0.</title>
<updated>2024-05-22T18:44:07Z</updated>
<author>
<name>Natalia</name>
<email>124304+nessita@users.noreply.github.com</email>
</author>
<published>2024-05-03T17:39:43Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=05cce083ad662913008e107bc6332e7ffe1502e6'/>
<id>urn:sha1:05cce083ad662913008e107bc6332e7ffe1502e6</id>
<content type='text'>
This also removes remaining versionadded/changed annotations for older
versions.
</content>
</entry>
<entry>
<title>Fixed #31405 -- Added LoginRequiredMiddleware.</title>
<updated>2024-05-22T06:51:17Z</updated>
<author>
<name>Hisham Mahmood</name>
<email>hishammahmood41@gmail.com</email>
</author>
<published>2024-05-05T06:21:28Z</published>
<link rel='alternate' type='text/html' href='http://cgit.adnoto.dev/django.git/commit/?id=c7fc9f20b49b5889a9a8f47de45165ac443c1a21'/>
<id>urn:sha1:c7fc9f20b49b5889a9a8f47de45165ac443c1a21</id>
<content type='text'>
Co-authored-by: Adam Johnson &lt;me@adamj.eu&gt;
Co-authored-by: Mehmet İnce &lt;mehmet@mehmetince.net&gt;
Co-authored-by: Sarah Boyce &lt;42296566+sarahboyce@users.noreply.github.com&gt;
</content>
</entry>
</feed>
