django-authentication – Page 3

Django-AttributeError ‘User’ object has no attribute ‘backend’ (But….it does?)

April 11, 2023 by Tarik

You must call authenticate before you can call login. authenticate sets an attribute on the object noting which backend has successfully validated it and clearing it for login, which isn’t happening in your code (and that’s the attribute that is missing). Documentation: https://docs.djangoproject.com/en/1.8/topics/auth/default/#how-to-log-a-user-in — check out the little callout that says “calling authenticate() first”.

Django: Populate user ID when saving a model

April 3, 2023 by Tarik

UPDATE 2020-01-02 ⚠ The following answer was never updated to the latest Python and Django versions. Since writing this a few years ago packages have been released to solve this problem. Nowadays I highly recommend using django-crum which implements the same technique but has tests and is updated regularly: https://pypi.org/project/django-crum/ The least obstrusive way is … Read more

Can django’s auth_user.username be varchar(75)? How could that be done?

March 10, 2023 by Tarik

There’s a way to achieve that without touching the core model, and without inheritance, but it’s definitely hackish and I would use it with extra care. If you look at Django’s doc on signals, you’ll see there’s one called class_prepared, which is basically sent once any actual model class has been created by the metaclass. … Read more

Get user information in django templates

March 1, 2023 by Tarik

An alternate method for current Django versions: {% if user.is_authenticated %} <p>Welcome, {{ user.get_username }}. Thanks for logging in.</p> {% else %} <p>Welcome, new user. Please log in.</p> {% endif %} Note: Use request.user.get_username() in views & user.get_username in templates. Preferred over referring username attribute directly. Source This template context variable is available if a … Read more

Users in initial data fixture

February 21, 2023 by Tarik

What might be easier in this case (and if you only need a few users) is to create some fake user accounts through the admin (including passwords) and then dump the users to a fixtures file using dumpdata: $ python manage.py dumpdata auth.User –indent 4 > users.json which will automatically create the fixtures for you … Read more

Manually logging in a user without password

February 8, 2023 by Tarik

You don’t need a password to log a user in. The auth.login function just takes a User object, which you are presumably already getting from the database when you enable the account. So you can pass that straight to login. Of course, you’ll need to be very careful that there’s no way a user can … Read more

How to force a user logout in Django?

January 30, 2023 by Tarik

Update: Since Django 1.7, users are automatically logged-out when their password changes. On each request, the current password hash is compared to the value saved in their session and if doesn’t match, the user is logged-out. So, a simple password update has the effect of logging the user out. You can then disable the account … Read more

Using Django auth UserAdmin for a custom user model

January 20, 2023 by Tarik

After digging around the Django source code for a while, I found a working soultion. I am not totally happy with this solution, but it seems to work. Feel free to suggest better solutions! Django uses UserAdmin to render the nice admin look for User model. By just using this in our admin.py-file, we can … Read more

Check permission inside a template in Django

December 23, 2022 by Tarik

If you are looking to check for permissions in templates, the following code would suffice: {% if perms.app_label.can_do_something %} <form here> {% endif %} Where model refers to the model that the user need permissions to see the form for. Refer to https://docs.djangoproject.com/en/stable/topics/auth/default/#permissions for more examples. The currently logged-in user’s permissions are stored in the … Read more

Django – Login with Email

December 19, 2022 by Tarik

You should write a custom authentication backend. Something like this will work: from django.contrib.auth import get_user_model from django.contrib.auth.backends import ModelBackend class EmailBackend(ModelBackend): def authenticate(self, request, username=None, password=None, **kwargs): UserModel = get_user_model() try: user = UserModel.objects.get(email=username) except UserModel.DoesNotExist: return None else: if user.check_password(password): return user return None Then, set that backend as your auth backend in … Read more