summaryrefslogtreecommitdiff
path: root/tests/auth_tests
AgeCommit message (Collapse)Author
2018-02-01[1.11.x] Fixed CVE-2018-6188 -- Fixed information leakage in AuthenticationForm.Tim Graham
Reverted 359370a8b8ca0efe99b1d4630b291ec060b69225 (refs #28645). This is a security fix.
2018-01-31[1.11.x] Fixed #29071 -- Fixed contrib.auth.authenticate() crash if a ↵Tim Graham
backend doesn't accept a request but a later one does. Regression in a3ba2662cdaa36183fdfb8a26dfa157e26fca76a. Backport of 55e16f25e9d2050e95e448f9ab2e4b9fc845a9e5 from stable/2.0.x
2017-11-08[1.11.x] Fixed #28645 -- Reallowed AuthenticationForm to raise the inactive ↵shanghui
user error when using ModelBackend. Regression in e0a3d937309a82b8beea8f41b17d8b6298da2a86. Thanks Guilherme Junqueira for the report and Tim Graham for the review. Backport of 359370a8b8ca0efe99b1d4630b291ec060b69225 from master
2017-09-03[1.11.x] Fixed #28550 -- Restored contrib.auth's login() and logout() views' ↵Zach Liu
respect of positional arguments. Regression in 78963495d0caadb77eb97ccf319ef0ba3b204fb5.
2017-08-24[1.11.x] Fixed #28513 -- Added POST request support to LogoutView.hui shang
Backport of c0f4c60edd429f5ef57241cfabd159d13e26e5ac from master
2017-06-13[1.11.x] Fixed #28229 -- Fixed the value of LoginView's "next" template ↵Mikhail Golubev
variable. Backport of e7dc39fb65e51d7613c941f7e5768b621dea4e76 from master
2017-05-22[1.11.x] Refs #28207 -- Fixed contrib.auth.authenticate() if 'backend' is in ↵Daniel Hahler
the credentials. Regression in 3008f30f194af386c354416be4c483f0f6b15f33. Backport of a3ba2662cdaa36183fdfb8a26dfa157e26fca76a from master
2017-05-15[1.11.x] Fixed #28207 -- Fixed contrib.auth.authenticate() if multiple auth ↵Tamas Szabo
backends don't accept a request. Backport of 3008f30f194af386c354416be4c483f0f6b15f33 from master
2017-04-19[1.11.x] Fixed #28097 -- Fixed layout of ReadOnlyPasswordHashWidget.Tim Graham
Backport of dff559ff83a6aac14de0bbca58101786edf4195f from master
2017-04-02[1.11.x] Refs #27025 -- Fixed "invalid escape sequence" warning in ↵Tim Graham
auth_tests on Python 3.6. Backport of d4d79d0f200357b28419203557cc61c8168316ab from master
2017-03-07[1.11.x] Fixed #27891 -- Added ↵Camilo Nova
PasswordResetConfirmView.post_reset_login_backend. Backport of 5db465d5a6c389b8f9c6e21f7233be9387dc069d from master
2017-03-07[1.11.x] Factored out uid/user tokens in auth_tests urlpatterns.Tim Graham
Backport of 72ff9d53e66d6b59ae5d8a1b830f5fc798eb75d0 from master
2017-02-24[1.11.x] Refs #25187 -- Fixed AuthBackend.authenticate() compatibility for ↵Tim Graham
signatures that accept a request kwarg. Backport of c31e7ab5a4b062225bc4f6b5cae065325dd30f1f from master
2017-02-15[1.11.x] Fixed #27840 -- Fixed KeyError in ↵Markus Holtermann
PasswordResetConfirmView.form_valid(). When a user is already logged in when submitting the password and password confirmation to reset a password, a KeyError occurred while removing the reset session token from the session. Refs #17209 Thanks Quentin Marlats for the report and Florian Apolloner and Tim Graham for the review.
2017-02-07[1.11.x] Fixed #27815 -- Made LoginView pass the request kwarg to ↵Zoltan Gyarmati
AuthenticationForm. Backport of 41ba27fefdd313333d94408802afff36a9eedb83 from master
2017-01-13Fixed #27518 -- Prevented possibie password reset token leak via HTTP ↵Romain Garrigues
Referer header. Thanks Florian Apolloner for contributing to this patch and Collin Anderson, Markus Holtermann, and Tim Graham for review.
2017-01-12Split AuthTemplateTests into test methods.Tim Graham
2016-12-07Fixed #27579 -- Added aliases for Python 3's assertion names in SimpleTestCase.Tim Graham
2016-11-23Normalized casing of "custom user model".Tim Graham
2016-11-21Refs #17209 -- Fixed token verification for PasswordResetConfirmView POST ↵Florian Apolloner
requests.
2016-11-16Fixed #27467 -- Made UserAttributeSimilarityValidator max_similarity=0/1 ↵Tim Graham
work as documented. Thanks goblinJoel for the report and feedback.
2016-11-14Fixed E305 flake8 warnings.Ramin Farajpour Cami
2016-11-10Refs #27392 -- Removed "Tests that", "Ensures that", etc. from test docstrings.za
2016-10-28Simplified some auth_tests with assertRedirects().Tim Graham
2016-10-25Reverted "Fixed #26401 -- Added BaseAuthConfig to use auth without migrations."Jon Dufresne
This reverts commit 1ec1633cb294d8ce2a65ece6b56c258483596fba as it doesn't handle ContentType's auth.Permission dependency. Thus, it doesn't allow auth without migrations.
2016-09-27Fixed #20705 -- Allowed using PasswordResetForm with user models with an ↵levental
email field not named 'email'.
2016-09-27Fixed #27053 -- Documented contrib.auth.get_user().Berker Peksag
2016-09-17Refs #27025 -- Fixed "invalid escape sequence" warnings in Python 3.6.Tim Graham
http://bugs.python.org/issue27364
2016-09-14Fixed #26170 -- Made ModelAdmin views run transactions on the correct database.Jibodeah
Thanks juntatalor for the initial patch.
2016-09-12Fixed #23155 -- Added request argument to user_login_failed signal.Gavin Wahl
2016-09-12Fixed #25187 -- Made request available in authentication backends.Aleksej Manaev
2016-09-12Added a blank line per isort.Tim Graham
2016-09-10Fixed #26401 -- Added BaseAuthConfig to use auth without migrations.Jon Dufresne
2016-09-10Fixed indentation in previous commit.Tim Graham
2016-09-10Fixed #26097 -- Added password_validators_help_text_html to UserCreationForm.Alexander Gaevsky
2016-09-07Fixed #26956 -- Added success_url_allowed_hosts to LoginView and LogoutView.Jon Dufresne
Allows specifying additional hosts to redirect after login and log out.
2016-08-28Fixed typo in auth management test.Jon Dufresne
2016-08-24Fixed #27111 -- Fixed KeyError if USERNAME_FIELD isn't in ↵Berker Peksag
UserCreationForm.fields.
2016-08-19Refs #26902 -- Protected against insecure redirects in Login/LogoutView.Przemysław Suliga
2016-08-18Removed unused 'password' parameter in auth_tests.Tim Graham
2016-08-15Fixed #27009 -- Made update_session_auth_hash() rotate the session key.Tim Graham
2016-08-10Fixed #26909 -- Allowed UserAttributeSimilarityValidator to validate against ↵Andrew Nester
model properties.
2016-08-10Fixed #26960 -- Added PasswordResetConfirmView option to automatically log ↵jordij
in after a reset.
2016-08-10Fixed #26951 -- Allowed AuthenticationForm to work with a username of 0.Olexander Yermakov
2016-08-03Fixed #26997 -- Fixed checks crash with empty Meta.default_permissions.Sergey Yurchenko
2016-07-28Fixed #26929 -- Deprecated extra_context parameter of ↵Andrew Nester
contrib.auth.views.logout_then_login().
2016-07-28Removed a blank line per isort and a trailing whitespace.Tim Graham
2016-07-22Fixed #26882 -- Added tests for auth.views.logout_then_login().Andrew Nester
2016-07-16Fixed #17209 -- Added password reset/change class-based viewsClaude Paroz
Thanks Tim Graham for the review.
2016-06-24Fixed #26719 -- Normalized email in AbstractUser.clean().Bang Dao + Tam Huynh
generated by cgit v1.3 (git 2.53.0) at 2026-10-12 23:58:55 +0000