From bd7c879d5a0daeaa58f2a32901db6e8d8ed5212d Mon Sep 17 00:00:00 2001 From: Marten Kenbeek Date: Thu, 5 Mar 2015 13:09:08 +0100 Subject: [PATCH] [1.8.x] Stressed authentication should be successful before logging in a user. Backport of 8e744fa1507b6d425860c54e7673e603279367eb from master --- docs/topics/auth/default.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/topics/auth/default.txt b/docs/topics/auth/default.txt index aed6187a37..6cdda816a6 100644 --- a/docs/topics/auth/default.txt +++ b/docs/topics/auth/default.txt @@ -354,8 +354,8 @@ If you have an authenticated user you want to attach to the current session .. admonition:: Calling ``authenticate()`` first - When you're manually logging a user in, you *must* call - :func:`~django.contrib.auth.authenticate()` before you call + When you're manually logging a user in, you *must* successfully authenticate + the user with :func:`~django.contrib.auth.authenticate()` before you call :func:`~django.contrib.auth.login()`. :func:`~django.contrib.auth.authenticate()` sets an attribute on the :class:`~django.contrib.auth.models.User` noting