Florian Apolloner 67b46ba701 Fixed CVE-2016-2513 -- Fixed user enumeration timing attack during login. ...

This is a security fix.

2016-03-01 11:25:28 -05:00

..

fixtures

…

models

Fixed a stray __unicode__() method in auth_tests.

2016-02-23 13:20:50 -05:00

templates

Fixed #24944 -- Added extra_email_context parameter to password_reset() view.

2015-09-18 18:56:04 -04:00

__init__.py

…

backend_alias.py

…

common-passwords-custom.txt

Fixed #16860 -- Added password validation to django.contrib.auth.

2015-06-07 19:31:20 +02:00

settings.py

…

test_auth_backends.py

Fixed #26089 -- Removed custom user test models from public API.

2016-02-04 12:30:34 -05:00

test_basic.py

Fixed #26089 -- Removed custom user test models from public API.

2016-02-04 12:30:34 -05:00

test_context_processors.py

Fixed #26175 -- Removed SHA1 password hashes in tests.

2016-02-06 08:47:21 -05:00

test_decorators.py

Fixed #26089 -- Removed custom user test models from public API.

2016-02-04 12:30:34 -05:00

test_forms.py

Refs #19353 -- Added tests for using custom user models with built-in auth forms.

2016-02-17 10:26:07 -05:00

test_handlers.py

Fixed #26089 -- Removed custom user test models from public API.

2016-02-04 12:30:34 -05:00

test_hashers.py

Fixed CVE-2016-2513 -- Fixed user enumeration timing attack during login.

2016-03-01 11:25:28 -05:00

test_management.py

Removed obsolete test CreatesuperuserManagementCommandTestCase.test_nolocale.

2016-02-29 08:46:37 -05:00

test_middleware.py

Refs #23957 -- Required session verification per deprecation timeline.

2015-09-23 19:31:10 -04:00

test_mixins.py

Fixed #26089 -- Removed custom user test models from public API.

2016-02-04 12:30:34 -05:00

test_models.py

Fixed #26175 -- Removed SHA1 password hashes in tests.

2016-02-06 08:47:21 -05:00

test_remote_user.py

Fixed #25029 -- Added PersistentRemoteUserMiddleware for login-page-only external authentication.

2015-07-02 17:38:10 -04:00

test_signals.py

Fixed #26175 -- Removed SHA1 password hashes in tests.

2016-02-06 08:47:21 -05:00

test_templates.py

Fixed #26175 -- Removed SHA1 password hashes in tests.

2016-02-06 08:47:21 -05:00

test_tokens.py

Refs #26022 -- Used context manager version of assertRaises in tests.

2016-01-29 12:32:18 -05:00

test_validators.py

Fixed #26175 -- Removed SHA1 password hashes in tests.

2016-02-06 08:47:21 -05:00

test_views.py

Fixed #12233 -- Allowed redirecting authenticated users away from the login view.

2016-02-25 07:18:33 -05:00

urls_admin.py

Fixed #21927 -- Made application and instance namespaces more distinct.

2015-06-08 15:12:20 -04:00

urls_custom_user_admin.py

Refs #23957 -- Required session verification per deprecation timeline.

2015-09-23 19:31:10 -04:00

urls.py

Fixed #12233 -- Allowed redirecting authenticated users away from the login view.

2016-02-25 07:18:33 -05:00