Carlton Gibson bf39978a53 Fixed CVE-2018-16984 -- Fixed password hash disclosure to admin "view only" users. ...

Thanks Claude Paroz & Tim Graham for collaborating on the patch.

2018-10-01 10:05:01 +02:00

..

fixtures

Converted test fixtures to setUpTestData methods

2015-03-05 10:10:32 +11:00

models

Fixed #29616 -- Fixed createsuperuser for user models that don't have a password field.

2018-08-05 14:26:03 -04:00

templates

Fixed spelling of "nonexistent".

2017-02-03 08:01:45 -05:00

__init__.py

Moved contrib.auth tests out of contrib.

2015-02-11 10:19:22 -05:00

backend_alias.py

Moved contrib.auth tests out of contrib.

2015-02-11 10:19:22 -05:00

client.py

Refs #23919 -- Replaced super(ClassName, self) with super().

2017-01-25 12:23:46 -05:00

common-passwords-custom.txt

Fixed #16860 -- Added password validation to django.contrib.auth.

2015-06-07 19:31:20 +02:00

settings.py

Refs #23919 -- Removed django.utils._os.upath()/npath()/abspathu() usage.

2017-01-20 08:01:02 -05:00

test_admin_multidb.py

Refs #27804 -- Used subTest() in several tests.

2017-05-24 08:36:34 -04:00

test_auth_backends.py

Fixed #29258 -- Added type checking for login()'s backend argument.

2018-03-28 10:10:18 -04:00

test_basic.py

Moved AnonymousUser tests to its own test case.

2017-09-28 13:11:07 -04:00

test_checks.py

Fixed #28776 -- Fixed a/an/and typos in docs and comments.

2017-11-06 22:41:03 -05:00

test_context_processors.py

Fixed #28984 -- Made assorted code simplifications.

2018-01-03 13:24:02 -05:00

test_decorators.py

Fixed spelling of "nonexistent".

2017-02-03 08:01:45 -05:00

test_forms.py

Fixed #29449 -- Reverted "Fixed #28757 -- Allowed using contrib.auth forms without installing contrib.auth."

2018-07-02 18:39:26 -04:00

test_handlers.py

Refs #23919 -- Removed encoding preambles and future imports

2017-01-18 09:55:19 +01:00

test_hashers.py

Increased the default PBKDF2 iterations for Django 2.2.

2018-05-17 11:05:45 -04:00

test_management.py

Simplified how createsuperuser tests generate passwords.

2018-08-18 16:26:13 -04:00

test_middleware.py

Fixed #25847 -- Made User.is_(anonymous|authenticated) properties.

2016-04-09 14:54:18 -04:00

test_mixins.py

Fixed #28379 -- Made AccessMixin raise Permissiondenied for authenticated users.

2018-02-16 13:58:55 -05:00

test_models.py

Fixed #29782 -- Added better error message when filtering queryset with AnonymousUser.

2018-09-26 15:36:19 -04:00

test_remote_user.py

Refs #23919 -- Replaced super(ClassName, self) with super().

2017-01-25 12:23:46 -05:00

test_signals.py

Fixed #29132 -- Avoided connecting update_last_login() handler if User.last_login isn't a field.

2018-02-21 10:36:31 -05:00

test_templates.py

Refs #27795 -- Removed force_bytes/text() usage in tests.

2018-02-07 14:20:04 -05:00

test_tokens.py

Reverted "Fixed #28248 -- Fixed password reset tokens being valid for 1 day longer than PASSWORD_RESET_TIMEOUT_DAYS."

2017-09-25 09:05:00 -04:00

test_validators.py

Added a test for password_changed() with a custom validator.

2018-09-25 11:58:05 -04:00

test_views.py

Fixed CVE-2018-16984 -- Fixed password hash disclosure to admin "view only" users.

2018-10-01 10:05:01 +02:00

urls_admin.py

Fixed #21927 -- Made application and instance namespaces more distinct.

2015-06-08 15:12:20 -04:00

urls_custom_user_admin.py

Refs #23919 -- Replaced super(ClassName, self) with super().

2017-01-25 12:23:46 -05:00

urls.py

Fixed #29212 -- Doc'd redirect loop if @permission_required used with redirect_authenticated_user.

2018-04-19 10:21:24 -04:00