| Age | Commit message (Expand) | Author |
| 2013-04-02 | Modified auth to work with unittest2 discovery. | Preston Timmons |
| 2013-03-27 | Fixed #20078: don't allow filtering on password in the user admin. | Jacob Kaplan-Moss |
| 2013-02-23 | Fixed #15198 -- pass request to AuthenticationForm | Preston Holmes |
| 2013-02-23 | Fixed #19758 -- Avoided leaking email existence through the password reset form. | Horst Gutmann |
| 2013-02-19 | Added a new required ALLOWED_HOSTS setting for HTTP host header validation. | Carl Meyer |
| 2013-02-14 | Fixed a misnamed variable introduced in commit 142ec8b283 | Claude Paroz |
| 2013-02-13 | Fixed #8404 -- Isolated auth password-related tests from custom templates | Claude Paroz |
| 2013-02-13 | Fixed #18558 -- Added url property to HttpResponseRedirect* | Hiroki Kiyohara |
| 2012-12-16 | Corrected tests depending on the error message on the AuthenticationForm. | Russell Keith-Magee |
| 2012-12-08 | Fixed #19357 -- Allow non-ASCII chars in filesystem paths | Claude Paroz |
| 2012-10-29 | Fixed #19172 -- Isolated poisoned_http_host tests from 500 handlers | Claude Paroz |
| 2012-10-17 | Fixed a security issue related to password resets | Preston Holmes |
| 2012-09-26 | Fixed #3011 -- Added swappable auth.User models. | Russell Keith-Magee |
| 2012-09-15 | Fixed #17948 -- Isolated auth tests from custom template loaders | Claude Paroz |
| 2012-08-07 | [py3] Ported django.utils.encoding. | Aymeric Augustin |
| 2012-07-22 | [py3] Updated urllib/urllib2/urlparse imports. | Aymeric Augustin |
| 2012-04-30 | Ensured tests pass using custom PASSWORD_HASHERS. | Anssi Kääriäinen |
| 2012-04-14 | Converted more test assertions to assert[Not]Contains. | Claude Paroz |
| 2012-03-31 | Used the override_settings decorator in the tests of auth, flatpages, and for... | Aymeric Augustin |
| 2012-03-30 | Use the class decorator syntax available in Python >= 2.6. Refs #17965. | Aymeric Augustin |
| 2012-03-30 | Removed with_statement imports, useless in Python >= 2.6. Refs #17965. Thanks... | Claude Paroz |
| 2012-03-20 | Fixed #17940 -- Enforced USE_TZ = False in contrib apps tests that use fixtur... | Aymeric Augustin |
| 2011-12-15 | Fixed #17194 -- Made sure the auth form tests work if a language other than E... | Jannis Leidel |
| 2011-11-22 | Removed redundant definition of urls in the auth tests. | Aymeric Augustin |
| 2011-09-24 | Fixed #16789 -- Added names to URLs in convenience contrib.auth urls.py. | Ramiro Morales |
| 2011-07-31 | Added yet another import from the future. | Jannis Leidel |
| 2011-07-26 | Fixed #16413 -- Stopped an auth test from failing if LOGIN_URL is set to a no... | Jannis Leidel |
| 2011-06-26 | Fixed #15266 -- Applied login_required decorator to password_change_done view... | Jannis Leidel |
| 2011-03-03 | Updated test assertions that have been deprecated by the move to unittest2. I... | Russell Keith-Magee |
| 2011-03-02 | Fixed #11223 -- Fixed logout view to use the 'next' GET parameter correctly a... | Jannis Leidel |
| 2011-03-01 | Fixed #12534 -- Loosened the the security check for "next" redirects after lo... | Jannis Leidel |
| 2011-02-05 | Fixed #15111 -- Ensured that the auth, contenttypes and sitemaps tests will r... | Russell Keith-Magee |
| 2011-01-24 | Fixed #15067 -- Modified the range checks on base36_to_int so you are guarant... | Russell Keith-Magee |
| 2010-12-01 | Fixed #14809 -- broken login related tests after r14733. | Chris Beaven |
| 2010-11-27 | Fixes #11025 -- ability to specify LOGIN_URL as full qualified absolute URL. | Chris Beaven |
| 2010-11-04 | Fixed #14612 - Password reset page leaks valid user ids publicly. | Luke Plant |
| 2010-11-04 | Fixed a test setup and isolation bug that was causing PasswordResetTest to fa... | Luke Plant |
| 2010-10-04 | Fixed #14386, #8960, #10235, #10909, #10608, #13845, #14377 - standardize Sit... | Luke Plant |
| 2010-09-12 | Permit custom from-email address in auth forms email. | Malcolm Tredinnick |
| 2010-09-10 | Added login_url argument to login_required decorator. Thanks mhlakhani and er... | Jannis Leidel |
| 2010-03-01 | Fixed #11457: tightened the security check for "next" redirects after logins. | Jacob Kaplan-Moss |
| 2010-02-13 | Fixed #10976 -- Isolated contrib.auth tests so they will always pass, regardl... | Russell Keith-Magee |
| 2009-04-19 | Fixed #8752 -- Fixed django.contrib.auth tests to be locale-independent. | Malcolm Tredinnick |
| 2009-04-10 | Fixed #10747: fixed the auth tests to ignore broken user-supplied login/logou... | Jacob Kaplan-Moss |
| 2009-04-01 | Fixed #10460: the logout view can now redirect like the rest of the auth view... | Jacob Kaplan-Moss |
| 2009-04-01 | Fixed #9881: Added the to the login view context, not just the site's name. ... | Jacob Kaplan-Moss |
| 2009-03-31 | Fixed #10553 -- Corrected several uses of `URLconf` in documentation and comm... | Gary Wilson Jr |
| 2008-11-06 | Fixed #6160, #9111 -- Consistently apply conditional_escape to form errors an... | Karen Tracey |
| 2008-08-27 | Fixed #8552 -- Use the LOGIN_REDIRECT_URL setting in the auth tests, rather t... | Malcolm Tredinnick |
| 2008-08-23 | Tests for password change process. Thanks, Mike Richardson. Fixed #8402. | Malcolm Tredinnick |