diff options
| author | Marten Kenbeek <marten.knbk@gmail.com> | 2015-03-05 13:09:08 +0100 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2015-03-05 12:18:25 -0500 |
| commit | 7f2d60996ca26003d35bead426b10fd8dd908347 (patch) | |
| tree | cc0b76fa05d9e0e9538439b470b20ea866fd7cd1 | |
| parent | 5de18e50dcfaec06f7fb25e62bef914f9d157938 (diff) | |
[1.7.x] Stressed authentication should be successful before logging in a user.
Backport of 8e744fa1507b6d425860c54e7673e603279367eb from master
| -rw-r--r-- | docs/topics/auth/default.txt | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/docs/topics/auth/default.txt b/docs/topics/auth/default.txt index ba9516d0ae..845e69da5c 100644 --- a/docs/topics/auth/default.txt +++ b/docs/topics/auth/default.txt @@ -356,8 +356,8 @@ If you have an authenticated user you want to attach to the current session .. admonition:: Calling ``authenticate()`` first - When you're manually logging a user in, you *must* call - :func:`~django.contrib.auth.authenticate()` before you call + When you're manually logging a user in, you *must* successfully authenticate + the user with :func:`~django.contrib.auth.authenticate()` before you call :func:`~django.contrib.auth.login()`. :func:`~django.contrib.auth.authenticate()` sets an attribute on the :class:`~django.contrib.auth.models.User` noting |