summaryrefslogtreecommitdiff
path: root/django/contrib/auth/__init__.py
AgeCommit message (Expand)Author
2026-04-27Fixed #36901 -- Centralized auth timing attack mitigations.afenoum
2026-04-02Fixed #37017 -- Fixed setting or clearing of request.user after alogin/alogou...Jacob Walls
2026-02-10Fixed #36903 -- Fixed further NameErrors when inspecting functions with defer...93578237
2025-09-17Refs #35530 -- Removed request.user or auser() fallback in auth.login and aut...Jacob Walls
2025-08-27Fixed #36572 -- Revert "Fixed #36546 -- Deprecated django.utils.crypto.consta...Sarah Boyce
2025-08-25Fixed #36546 -- Deprecated django.utils.crypto.constant_time_compare() in fav...SaJH
2025-08-22Refs #35530 -- Corrected deprecation message in auth.alogin().Mariusz Felisiak
2025-08-20Refs #35303 -- Made small optimizations in alogout() and aget_user().Mariusz Felisiak
2025-08-20Fixed #36561 -- Used request.auser() in contrib.auth.aupdate_session_auth_has...Xinyi Rong
2025-08-08Fixed #36540 -- Updated request.auser() in contrib.auth.alogin() and contrib....Xinyi Rong
2024-11-28Fixed #35530 -- Deprecated request.user fallback in auth.login and auth.alogin.Jaap Roes
2024-10-07Fixed #35303 -- Implemented async auth backends and utils.Jon Janzen
2024-03-13Fixed #34901 -- Added async-compatible interface to session engines.Jon Janzen
2023-06-27Fixed #34391 -- Added async-compatible interface to auth functions and relate...Jon Janzen
2023-03-08Fixed #34384 -- Fixed session validation when rotation secret keys.David Wobrock
2022-02-07Refs #33476 -- Refactored code to strictly match 88 characters line length.Mariusz Felisiak
2022-02-07Refs #33476 -- Reformatted code with Black.django-bot
2021-01-14Refs #27468 -- Removed support for the pre-Django 3.1 user sessions.Mariusz Felisiak
2020-10-28Refs #28215 -- Marked auth credentials as sensitive variables.Hasan Ramezani
2020-07-21Fixed #31180 -- Configured applications automatically.Aymeric Augustin
2020-04-29Refs #27468 -- Made user sessions use SHA-256 algorithm.Mariusz Felisiak
2019-12-10Fixed #26480 -- Fixed crash of contrib.auth.authenticate() on decorated authe...Baptiste Mispelon
2019-02-14Refs #15902 -- Deprecated storing user's language in the session.Claude Paroz
2018-03-28Fixed #29258 -- Added type checking for login()'s backend argument.Abeer Upadhyay
2018-01-03Fixed #28985 -- Removed unneeded None checks before hasattr().Дилян Палаузов
2017-09-22Refs #25187 -- Required the authenticate() method of authentication backends ...Tim Graham
2017-05-22Refs #28207 -- Fixed contrib.auth.authenticate() if 'backend' is in the crede...Daniel Hahler
2017-05-15Fixed #28207 -- Fixed contrib.auth.authenticate() if multiple auth backends d...Tamas Szabo
2017-02-24Refs #25187 -- Fixed AuthBackend.authenticate() compatibility for signatures ...Tim Graham
2017-02-04Refs #27656 -- Updated django.contrib docstring verb style according to PEP 257.Anton Samarchyan
2016-11-25Fixed #25966 -- Made get_user_model() work at import time.Aymeric Augustin
2016-11-14Fixed E305 flake8 warnings.Ramin Farajpour Cami
2016-09-12Fixed #23155 -- Added request argument to user_login_failed signal.Gavin Wahl
2016-09-12Fixed #25187 -- Made request available in authentication backends.Aleksej Manaev
2016-08-15Fixed #27009 -- Made update_session_auth_hash() rotate the session key.Tim Graham
2016-05-13Fixed #26614 -- Used constant_time_compare() in checking session auth hash in...Tim Graham
2016-04-09Fixed #25847 -- Made User.is_(anonymous|authenticated) properties.Jeremy Lainé
2016-04-08Fixed E128 flake8 warnings in django/.Tim Graham
2016-03-12Fixed #26343 -- Sent user_login_failed signal if an auth backend raises Permi...ieatkittens
2016-01-07Fixed #24855 -- Allowed using contrib.auth.login() without credentials.Paulo Poiati
2015-09-23Refs #23957 -- Required session verification per deprecation timeline.Tim Graham
2015-02-12Fixed #24161 -- Stored the user primary key as a serialized value in the sess...Tim Graham
2014-12-03Fixed #23939 -- Moved session verification out of SessionAuthenticationMiddle...Tim Graham
2014-11-28Fixed #23925 -- Allowed settings.AUTHENTICATION_BACKENDS to reference import ...sdeprez
2014-09-05Limited lines to 119 characters in django/Tim Graham
2014-04-17Fixed a KeyError on login with legacy sessions; refs #21649.Tim Graham
2014-04-05Fixed #21649 -- Added optional invalidation of sessions when user password ch...Tim Graham
2014-03-21Removed reading of old 'django_language' session variable per deprecation tim...Tim Graham
2014-02-22Fixed #22120 -- Documented persistent activation of languages and cleaned up ...Erik Romijn
2014-02-18Fixed #21790 -- Removed reliance on an assert in auth.get_user().Tim Graham