summaryrefslogtreecommitdiff
path: root/tests/auth_tests/test_views.py
AgeCommit message (Collapse)Author
2019-03-15[2.2.x] Cleaned up exception message checking in some tests.Jon Dufresne
Backport of 95b7699ffc4bdb32a504fccfd127f1b76a8a1d1c from master.
2018-12-31Updated test URL patterns to use path() and re_path().Tim Graham
2018-11-27Switched setUp() to setUpTestData() where possible in Django's tests.Simon Charette
2018-10-10Refs #27795 -- Removed force_bytes() usage from django/utils/http.py.Jon Dufresne
django.utils.http.urlsafe_base64_encode() now returns a string, not a bytestring. Since URLs are represented as strings, urlsafe_base64_encode() should return a string. All uses immediately decoded the bytestring to a string anyway. As the inverse operation, urlsafe_base64_decode() accepts a string.
2018-10-01Fixed #29809 -- Fixed a crash when a "view only" user POSTs to the admin ↵Tim Graham
user change form.
2018-10-01Fixed CVE-2018-16984 -- Fixed password hash disclosure to admin "view only" ↵Carlton Gibson
users. Thanks Claude Paroz & Tim Graham for collaborating on the patch.
2018-08-17Fixed #29686 -- Made UserAdmin.user_change_password() pass user to ↵Alexander Todorov
has_change_permission().
2018-06-20Refs #27398 -- Simplified some tests with assertRedirects().Tim Graham
2018-06-20Fixed #27398 -- Added an assertion to compare URLs, ignoring the order of ↵Jan Pieter Waagmeester
their query strings.
2018-05-07Replaced django.test.utils.patch_logger() with assertLogs().Claude Paroz
Thanks Tim Graham for the review.
2018-04-19Fixed #29212 -- Doc'd redirect loop if @permission_required used with ↵Nick Pope
redirect_authenticated_user.
2018-03-15Fixed #29206 -- Fixed PasswordResetConfirmView crash when the URL contains a ↵Mattia Procopio
non-UUID where one is expected.
2018-02-07Refs #27795 -- Removed force_bytes/text() usage in tests.Tim Graham
2017-09-22Refs #26929 -- Removed extra_context parameter of ↵Tim Graham
contrib.auth.views.logout_then_login(). Per deprecation timeline.
2017-09-09Fixed some comments referring to a nonexistent TestClient class.Luoxzhg
2017-08-24Fixed #28513 -- Added POST request support to LogoutView.hui shang
2017-06-13Fixed #28229 -- Fixed the value of LoginView's "next" template variable.Mikhail Golubev
2017-05-24Refs #27804 -- Used subTest() in several tests.Bruno Alla
2017-03-07Fixed #27891 -- Added PasswordResetConfirmView.post_reset_login_backend.Camilo Nova
2017-02-15Fixed #27840 -- Fixed KeyError in PasswordResetConfirmView.form_valid().Markus Holtermann
When a user is already logged in when submitting the password and password confirmation to reset a password, a KeyError occurred while removing the reset session token from the session. Refs #17209 Thanks Quentin Marlats for the report and Florian Apolloner and Tim Graham for the review.
2017-02-07Fixed #27815 -- Made LoginView pass the request kwarg to AuthenticationForm.Zoltan Gyarmati
2017-02-03Fixed spelling of "nonexistent".Tim Graham
2017-01-26Refs #23919 -- Replaced usage of django.utils.http utilities with Python ↵Claude Paroz
equivalents Thanks Tim Graham for the review.
2017-01-25Refs #23919 -- Replaced super(ClassName, self) with super().chillaranand
2017-01-24Removed unneeded force_text calls in the test suiteClaude Paroz
2017-01-18Refs #23919 -- Removed most of remaining six usageClaude Paroz
Thanks Tim Graham for the review.
2017-01-18Refs #23919 -- Removed encoding preambles and future importsClaude Paroz
2017-01-13Fixed #27518 -- Prevented possibie password reset token leak via HTTP ↵Romain Garrigues
Referer header. Thanks Florian Apolloner for contributing to this patch and Collin Anderson, Markus Holtermann, and Tim Graham for review.
2016-11-21Refs #17209 -- Fixed token verification for PasswordResetConfirmView POST ↵Florian Apolloner
requests.
2016-11-10Refs #27392 -- Removed "Tests that", "Ensures that", etc. from test docstrings.za
2016-10-28Simplified some auth_tests with assertRedirects().Tim Graham
2016-09-07Fixed #26956 -- Added success_url_allowed_hosts to LoginView and LogoutView.Jon Dufresne
Allows specifying additional hosts to redirect after login and log out.
2016-08-19Refs #26902 -- Protected against insecure redirects in Login/LogoutView.Przemysław Suliga
2016-08-18Removed unused 'password' parameter in auth_tests.Tim Graham
2016-08-15Fixed #27009 -- Made update_session_auth_hash() rotate the session key.Tim Graham
2016-08-10Fixed #26960 -- Added PasswordResetConfirmView option to automatically log ↵jordij
in after a reset.
2016-07-28Fixed #26929 -- Deprecated extra_context parameter of ↵Andrew Nester
contrib.auth.views.logout_then_login().
2016-07-22Fixed #26882 -- Added tests for auth.views.logout_then_login().Andrew Nester
2016-06-24Refs #17209 -- Added LoginView and LogoutView class-based viewsClaude Paroz
Thanks Tim Graham for the review.
2016-04-08Fixed E128 flake8 warnings in tests/.Tim Graham
2016-02-25Fixed #12233 -- Allowed redirecting authenticated users away from the login ↵Olivier Le Thanh Duong
view. contrib.auth.views.login() has a new parameter `redirect_authenticated_user` to automatically redirect authenticated users visiting the login page. Thanks to dmathieu and Alex Buchanan for the original code and to Carl Meyer for the help and review.
2016-02-13Fixed #11665 -- Made TestCase check deferrable constraints after each test.Jon Dufresne
2016-02-06Fixed #26175 -- Removed SHA1 password hashes in tests.Tim Graham
2016-02-04Fixed #26089 -- Removed custom user test models from public API.Simon Charette
Thanks to Tim Graham for the review.
2016-02-04Fixed #12405 -- Added LOGOUT_REDIRECT_URL setting.Hugo Osvaldo Barrera
After a user logs out via auth.views.logout(), they're redirected to LOGOUT_REDIRECT_URL if no `next_page` argument is provided.
2016-01-08Fixed #21113 -- Made LogEntry.change_message language independentClaude Paroz
Thanks Tim Graham for the review.
2015-12-31Fixed #26013 -- Moved django.core.urlresolvers to django.urls.Marten Kenbeek
Thanks to Tim Graham for the review.
2015-12-03Fixed many spelling mistakes in code, comments, and docs.Josh Soref
2015-10-27Fixed #25596 -- Fixed regression in password change view with custom user model.Tim Graham
The reverse() added in 50aa1a790ca66c2a93e0a52e00c53375b269ff49 crashed on a custom user model.
2015-10-02Fixed #25490 -- Made the logout() view send "no-cache" headers.Kaleb Elwert
generated by cgit v1.3 (git 2.53.0) at 2026-07-11 14:41:48 +0000