1
0
mirror of https://github.com/django/django.git synced 2025-10-31 09:41:08 +00:00

[1.8.x] Stressed authentication should be successful before logging in a user.

Backport of 8e744fa150 from master
This commit is contained in:
Marten Kenbeek
2015-03-05 13:09:08 +01:00
committed by Tim Graham
parent 2bef57f3fb
commit bd7c879d5a

View File

@@ -354,8 +354,8 @@ If you have an authenticated user you want to attach to the current session
.. admonition:: Calling ``authenticate()`` first
When you're manually logging a user in, you *must* call
:func:`~django.contrib.auth.authenticate()` before you call
When you're manually logging a user in, you *must* successfully authenticate
the user with :func:`~django.contrib.auth.authenticate()` before you call
:func:`~django.contrib.auth.login()`.
:func:`~django.contrib.auth.authenticate()`
sets an attribute on the :class:`~django.contrib.auth.models.User` noting