c38ade6e1b
* feat: insensitive username matching at django authentication * feat: use iexact when using the User object manager * fix: more places to ignore username case * fix: remove unused management command * fix: avoid get when probing for object existance * fix: force lowercase new usernames in secr/rolodex * fix: use explicit arguments when creating user
22 lines
1 KiB
Python
22 lines
1 KiB
Python
|
|
# From https://simpleisbetterthancomplex.com/tutorial/2017/02/06/how-to-implement-case-insensitive-username.html
|
|
from django.contrib.auth import get_user_model
|
|
from django.contrib.auth.backends import ModelBackend
|
|
|
|
|
|
class CaseInsensitiveModelBackend(ModelBackend):
|
|
def authenticate(self, request, username=None, password=None, **kwargs):
|
|
UserModel = get_user_model()
|
|
if username is None:
|
|
username = kwargs.get(UserModel.USERNAME_FIELD)
|
|
try:
|
|
case_insensitive_username_field = '{}__iexact'.format(UserModel.USERNAME_FIELD)
|
|
user = UserModel._default_manager.get(**{case_insensitive_username_field: username})
|
|
except UserModel.DoesNotExist:
|
|
# Run the default password hasher once to reduce the timing
|
|
# difference between an existing and a non-existing user (#20760).
|
|
UserModel().set_password(password)
|
|
else:
|
|
if user.check_password(password) and self.user_can_authenticate(user):
|
|
return user
|