summaryrefslogtreecommitdiff
path: root/django/contrib/auth/handlers
AgeCommit message (Collapse)Author
2026-04-27Fixed #36901 -- Centralized auth timing attack mitigations.afenoum
Thank you Mar Bartolome and Tim Schilling for reviews.
2026-02-03Fixed CVE-2025-13473 -- Standardized timing of check_password() in mod_wsgi ↵Jake Howard
auth handler. Refs CVE-2024-39329, #20760. Thanks Stackered for the report, and Jacob Walls and Markus Holtermann for the reviews. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
2018-09-26Refs #27795 -- Removed force_bytes() usage in contrib/auth/handlers/modwsgi.py.Jon Dufresne
2017-02-04Refs #27656 -- Updated django.contrib docstring verb style according to PEP 257.Anton Samarchyan
2016-11-25Fixed #25966 -- Made get_user_model() work at import time.Aymeric Augustin
This makes it equivalent to: `from django.contrib.auth.models import User`. Thanks Aymeric Augustin for the initial patch and Tim Graham for the review.
2015-02-06Sorted imports with isort; refs #23860.Tim Graham
2013-10-31Started attackign the next flake8 violationAlex Gaynor
2013-02-28Implemented persistent database connections.Aymeric Augustin
Thanks Anssi Kääriäinen and Karen Tracey for their inputs.
2013-02-09Made modwsgi groups_for_user consistent with check_passwordPreston Holmes
2b5f848207b1dab35afd6f63d0107629c76d4d9a based its changes on #19061 that made the is_active attribute mandatory for user models. The try/except was not removed for the groups_for_user function. refs #19780
2013-01-22Fixed #19596 -- Use `_default_manager` instead of `objects` in the auth app.Florian Apolloner
This is needed to support custom user models which don't define a manager named `objects`.
2012-10-29Fixed #19057 (again) -- added additional testsPreston Holmes
2012-10-02Fixed #19057 -- support custom user models in mod_wsgi auth handlerPreston Holmes
thanks @freakboy3742 for the catch and review
2012-09-27fixed #10809 -- add a mod_wsgi authentication handlerPreston Holmes
Thanks to baumer1122 for the suggestion and initial patch and David Fischer for the contributions and long term patch maintenance and docs.
2012-03-31Fixed #18029 -- Removed leftover mod_python files forgotten in r17835.Claude Paroz
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17849 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2007-09-15Small change to modpython auth handler to support Apache 2.2Jacob Kaplan-Moss
git-svn-id: http://code.djangoproject.com/svn/django/trunk@6305 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2006-09-22Fixed #2770 -- Fixed a database connection leak inMalcolm Tredinnick
django.contrib.auth.handlers.modpython. git-svn-id: http://code.djangoproject.com/svn/django/trunk@3789 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2006-05-31Added support to django/contrib/auth/handlers/modpython.py for setting ↵Adrian Holovaty
DJANGO_SETTINGS_MODULE via a PythonOption instead of SetEnv git-svn-id: http://code.djangoproject.com/svn/django/trunk@3012 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2006-05-02MERGED MAGIC-REMOVAL BRANCH TO TRUNK. This change is highly ↵Adrian Holovaty
backwards-incompatible. Please read http://code.djangoproject.com/wiki/RemovingTheMagic for upgrade instructions. git-svn-id: http://code.djangoproject.com/svn/django/trunk@2809 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2006-01-08Fixed #1185 -- Fixed Python 2.4 bug in Django authentication mod_python ↵Adrian Holovaty
handler. Thanks, Brian Ray git-svn-id: http://code.djangoproject.com/svn/django/trunk@1853 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2005-11-30Moved Apache auth handler to django/contrib/auth/handlers/modpython.pyAdrian Holovaty
git-svn-id: http://code.djangoproject.com/svn/django/trunk@1500 bcc190cf-cafb-0310-a4f2-bffc1f526a37