mirror of
https://github.com/django/django.git
synced 2025-10-24 22:26:08 +00:00
Fixed #36561 -- Used request.auser() in contrib.auth.aupdate_session_auth_hash().
This commit is contained in:
@@ -408,5 +408,5 @@ def update_session_auth_hash(request, user):
|
||||
async def aupdate_session_auth_hash(request, user):
|
||||
"""See update_session_auth_hash()."""
|
||||
await request.session.acycle_key()
|
||||
if hasattr(user, "get_session_auth_hash") and request.user == user:
|
||||
if hasattr(user, "get_session_auth_hash") and await request.auser() == user:
|
||||
await request.session.aset(HASH_SESSION_KEY, user.get_session_auth_hash())
|
||||
|
||||
@@ -143,7 +143,11 @@ class AsyncAuthTest(TestCase):
|
||||
await self.client.alogin(username="testuser", password="testpw")
|
||||
request = HttpRequest()
|
||||
request.session = await self.client.asession()
|
||||
request.user = self.test_user
|
||||
|
||||
async def auser():
|
||||
return self.test_user
|
||||
|
||||
request.auser = auser
|
||||
await aupdate_session_auth_hash(request, self.test_user)
|
||||
user = await aget_user(request)
|
||||
self.assertIsInstance(user, User)
|
||||
|
||||
Reference in New Issue
Block a user