diff options
| author | Jacob Walls <jacobtylerwalls@gmail.com> | 2026-06-01 11:46:08 -0400 |
|---|---|---|
| committer | Jacob Walls <jacobtylerwalls@gmail.com> | 2026-06-02 07:59:18 -0400 |
| commit | 48e0a64e6491b464249086d6052a00c8d2be418e (patch) | |
| tree | 209b12229dafc52e349ef30cb2c1b411478bf090 | |
| parent | ba70e1bcdd8dc879c7d5fc7a3d12b5831eb08540 (diff) | |
Refs #36439 -- Added missing thread_sensitive=False to dummy password hasher path.
The existing user path also uses thread_sensitive=False in acheck_password().
Follow-up to 7f66c3b41f0fb0fb938d7b96e20a28dccdaa2ecd.
| -rw-r--r-- | django/contrib/auth/__init__.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/django/contrib/auth/__init__.py b/django/contrib/auth/__init__.py index 723f348824..1d7199ce47 100644 --- a/django/contrib/auth/__init__.py +++ b/django/contrib/auth/__init__.py @@ -402,6 +402,7 @@ def check_password_with_timing_attack_mitigation(user, password): async def acheck_password_with_timing_attack_mitigation(user, password): """See check_user_with_timing_attack_mitigation.""" if user is None: - await sync_to_async(get_user_model()().set_password)(password) + set_password = get_user_model()().set_password + await sync_to_async(set_password, thread_sensitive=False)(password) else: return await user.acheck_password(password) |