django.git/tests/auth_tests/test_handlers.py, branch stable/6.0.x

[6.0.x] Fixed CVE-2025-13473 -- Standardized timing of check_password() in mod_wsgi auth handler.

2026-02-03T12:59:11Z

Refs CVE-2024-39329, #20760. Thanks Stackered for the report, and Jacob Walls and Markus Holtermann for the reviews. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Backport of 3eb814e02a4c336866d4189fa0c24fd1875863ed from main.

[6.0.x] Corrected assertions for True/False results in tests/auth_tests/test_handlers.py.

2025-11-24T19:40:23Z

Backport of d08ae991a83950aba5043f5a34f5af12d2effe9e from main.

Refs #33476 -- Reformatted code with Black.

2022-02-07T19:37:05Z

Refs #23919 -- Removed encoding preambles and future imports

2017-01-18T08:55:19Z

Refs #27392 -- Removed "Tests that", "Ensures that", etc. from test docstrings.

2016-11-11T02:30:21Z

Fixed #26554 -- Updated docs URLs to readthedocs.io

2016-04-28T14:09:57Z

Fixed #26303 -- Updated links to mod_wsgi docs.

2016-03-02T00:22:32Z

Fixed #26089 -- Removed custom user test models from public API.

2016-02-04T17:30:34Z

Thanks to Tim Graham for the review.

Moved contrib.auth tests out of contrib.

2015-02-11T15:19:22Z