p31829507
/
django
mirror of https://github.com/django/django.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

[1.8.x] Stressed authentication should be successful before logging in a user. 

Backport of 8e744fa150 from master
This commit is contained in:
Marten Kenbeek 2015-03-05 13:09:08 +01:00 committed by Tim Graham
parent 2bef57f3fb
commit bd7c879d5a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/topics/auth/default.txt
View File

@ -354,8 +354,8 @@ If you have an authenticated user you want to attach to the current session
.. admonition:: Calling ``authenticate()`` first
When you're manually logging a user in, you *must* call
:func:`~django.contrib.auth.authenticate()` before you call
When you're manually logging a user in, you *must* successfully authenticate
the user with :func:`~django.contrib.auth.authenticate()` before you call
:func:`~django.contrib.auth.login()`.
:func:`~django.contrib.auth.authenticate()`
sets an attribute on the :class:`~django.contrib.auth.models.User` noting