django.git/docs/topics/auth/default.txt, branch stable/4.2.x

[4.2.x] Fixed CVE-2024-45231 -- Avoided server error on password reset when email sending fails.

2024-09-03T12:42:25Z

On successful submission of a password reset request, an email is sent to the accounts known to the system. If sending this email fails (due to email backend misconfiguration, service provider outage, network issues, etc.), an attacker might exploit this by detecting which password reset requests succeed and which ones generate a 500 error response. Thanks to Thibaut Spriet for the report, and to Mariusz Felisiak, Adam Johnson, and Sarah Boyce for the reviews.

[4.2.x] Used extlinks for PyPI links.

2023-04-17T05:44:29Z

Co-authored-by: Mariusz Felisiak Backport of 2c4dc6476083c853b654e462c7ff65dbe0334c9e from main

[4.2.x] Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01T12:39:03Z

[4.2.x] Refs #34140 -- Corrected rst code-block and various formatting issues in docs.

2023-02-28T11:54:33Z

Backport of ba755ca13123d2691a0926ddb64e5d0a2906a880 from main

[4.2.x] Refs #34140 -- Applied rst code-block to non-Python examples.

2023-02-10T20:12:06Z

Thanks to J.V. Zammit, Paolo Melchiorre, and Mariusz Felisiak for reviews. Backport of 534ac4829764f317cf2fbc4a18354fcc998c1425 from main.

Fixed #25617 -- Added case-insensitive unique username validation in UserCreationForm.

2022-12-29T08:42:22Z

Co-Authored-By: Neven Mundar

Fixed #34187 -- Made UserCreationForm save many-to-many fields.

2022-11-29T04:56:53Z

Fixed #34154 -- Made mixin headers consistent in auth docs.

2022-11-14T04:28:27Z

Improved readability of string interpolation in frequently used examples in docs.

2022-11-10T12:18:38Z

Refs #30947 -- Changed tuples to lists where appropriate.

2022-08-30T07:57:17Z