django.git/tests/auth_tests/test_forms.py, branch stable/5.2.x

[5.2.x] Applied Black's 2026 stable style.

2026-03-30T19:55:07Z

https://github.com/psf/black/releases/tag/26.1.0 Backport of 6cff02078799b7c683a0d39630d49ab4fe532e7c from main.

[5.2.x] Fixed #36140 -- Allowed BaseUserCreationForm to define non required password fields.

2025-02-02T01:50:26Z

Regression in e626716c28b6286f8cf0f8174077f3d2244f3eb3. Thanks buffgecko12 for the report and Sarah Boyce for the review. Backport of d15454a6e84a595ffc8dc1b926282f484f782a8f from main.

Fixed CVE-2024-45231 -- Avoided server error on password reset when email sending fails.

2024-09-03T12:22:32Z

On successful submission of a password reset request, an email is sent to the accounts known to the system. If sending this email fails (due to email backend misconfiguration, service provider outage, network issues, etc.), an attacker might exploit this by detecting which password reset requests succeed and which ones generate a 500 error response. Thanks to Thibaut Spriet for the report, and to Mariusz Felisiak, Adam Johnson, and Sarah Boyce for the reviews.

Added helper and refactored PasswordResetFormTest to unify email sending tests.

2024-08-23T14:13:31Z

Fixed #35678 -- Removed "usable_password" field from BaseUserCreationForm.

2024-08-19T15:39:57Z

Refs #34429: Following the implementation allowing the setting of unusable passwords via the admin site, the `BaseUserCreationForm` and `UserCreationForm` were extended to include a new field for choosing whether password-based authentication for the new user should be enabled or disabled at creation time. Given that these forms are designed to be extended when implementing custom user models, this branch ensures that this new field is moved to a new, admin-dedicated, user creation form `AdminUserCreationForm`. Regression in e626716c28b6286f8cf0f8174077f3d2244f3eb3. Thanks Simon Willison for the report, Fabian Braun and Sarah Boyce for the review.

Refs #35678 -- Split tests for BaseUserCreationForm when using a custom User model.

2024-08-19T15:39:57Z

This work also allows to subclass BaseUserCreationFormTest to reuse the tests and assertions for testing forms that extend BaseUserCreationForm, which is now used for UserCreationFormTest, increasing its coverage.

Fixed #35477 -- Corrected 'required' errors in auth password set/change forms.

2024-05-30T19:31:01Z

The auth forms using SetPasswordMixin were incorrectly including the 'This field is required.' error when additional validations (e.g., overriding `clean_password1`) were performed and failed. This fix ensures accurate error reporting for password fields. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Fixed #34977 -- Improved accessibility in the UserChangeForm by replacing the reset password link with a button.

2024-03-27T19:40:41Z

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Fixed #34429 -- Allowed setting unusable passwords for users in the auth forms.

2024-02-20T15:13:32Z

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Refs #34429 -- Defined test user with unusable password for auth forms tests.

2024-02-20T15:12:37Z