django1/django/contrib/auth
Alex Gaynor 6819be1ea1 Fix a security issue in the auth system. Disclosure and new release forthcoming.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@15032 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-12-23 03:45:08 +00:00
..
fixtures Fixed #14731 -- Respect ordering when creating the default permissions. Thanks, chipx86. 2010-12-12 22:59:28 +00:00
handlers Small change to modpython auth handler to support Apache 2.2 2007-09-15 18:36:31 +00:00
management Fixed #14731 -- Respect ordering when creating the default permissions. Thanks, chipx86. 2010-12-12 22:59:28 +00:00
tests Fix a security issue in the auth system. Disclosure and new release forthcoming. 2010-12-23 03:45:08 +00:00
__init__.py Fixed #14249 -- Added support for inactive users to the auth backend system. Thanks, Harro van der Klauw. 2010-12-21 19:18:12 +00:00
admin.py Corrected change in behavior regarding the page shown after the 'Save' button is pressed when adding a user through the admin. 2010-11-19 22:45:51 +00:00
backends.py Fixed #14249 -- Added support for inactive users to the auth backend system. Thanks, Harro van der Klauw. 2010-12-21 19:18:12 +00:00
context_processors.py Fixed #12066 - Moved auth context processor from core to the auth app. Thanks, Rob Hudson. 2010-02-21 23:40:47 +00:00
create_superuser.py Fixed #7392 -- Corrected a typo in the backwards-compatibility layer to the new createsuperuser command. 2008-06-08 08:45:14 +00:00
decorators.py Fixes #11025 -- ability to specify LOGIN_URL as full qualified absolute URL. 2010-11-27 22:43:33 +00:00
forms.py Fixed #8342 -- Removed code from the admin that assumed that you can't login with an email address (nixed by r12634). Also refactored login code slightly to be DRY by using more of auth app's forms and views. 2010-12-02 00:44:35 +00:00
middleware.py Fixed #11509 -- Modified usage of "Web" to match our style guide in various documentation, comments and code. Thanks to timo and Simon Meers for the work on the patch. 2010-10-09 08:12:50 +00:00
models.py Fixed #14249 -- Added support for inactive users to the auth backend system. Thanks, Harro van der Klauw. 2010-12-21 19:18:12 +00:00
signals.py Fixed #5612 -- Added login and logout signals to contrib auth app. Thanks SmileyChris and pterk. 2010-11-26 13:33:27 +00:00
tokens.py Fixed #14445 - Use HMAC and constant-time comparison functions where needed. 2010-10-14 20:54:30 +00:00
urls.py Fix a security issue in the auth system. Disclosure and new release forthcoming. 2010-12-23 03:45:08 +00:00
views.py Fixed #14446 -- Prevented the password reset confirmation view to be cached. Thanks, Paul and Gabriel. 2010-12-12 22:59:03 +00:00