1
0
mirror of https://github.com/django/django.git synced 2025-08-20 08:49:13 +00:00

Fixed #36561 -- Used request.auser() in contrib.auth.aupdate_session_auth_hash().

This commit is contained in:
Xinyi Rong 2025-08-19 02:13:19 -07:00 committed by Sarah Boyce
parent bcddf641ae
commit cd7554e551
2 changed files with 6 additions and 2 deletions

View File

@ -408,5 +408,5 @@ def update_session_auth_hash(request, user):
async def aupdate_session_auth_hash(request, user):
"""See update_session_auth_hash()."""
await request.session.acycle_key()
if hasattr(user, "get_session_auth_hash") and request.user == user:
if hasattr(user, "get_session_auth_hash") and await request.auser() == user:
await request.session.aset(HASH_SESSION_KEY, user.get_session_auth_hash())

View File

@ -143,7 +143,11 @@ class AsyncAuthTest(TestCase):
await self.client.alogin(username="testuser", password="testpw")
request = HttpRequest()
request.session = await self.client.asession()
request.user = self.test_user
async def auser():
return self.test_user
request.auser = auser
await aupdate_session_auth_hash(request, self.test_user)
user = await aget_user(request)
self.assertIsInstance(user, User)