Django/django
11
0
Fork 0
Code Pull Requests Projects Releases Activity

[1.7.x] Stressed authentication should be successful before logging in a user.

Browse Source 
Backport of 8e744fa1507b6d425860c54e7673e603279367eb from master
This commit is contained in:
Marten Kenbeek 2015-03-05 13:09:08 +01:00 committed by Tim Graham
parent 5de18e50dc
commit 7f2d60996c
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/topics/auth/default.txt
View File

@ -356,8 +356,8 @@ If you have an authenticated user you want to attach to the current session
.. admonition:: Calling ``authenticate()`` first
When you're manually logging a user in, you *must* call
:func:`~django.contrib.auth.authenticate()` before you call
When you're manually logging a user in, you *must* successfully authenticate
the user with :func:`~django.contrib.auth.authenticate()` before you call
:func:`~django.contrib.auth.login()`.
:func:`~django.contrib.auth.authenticate()`
sets an attribute on the :class:`~django.contrib.auth.models.User` noting