search

mozilla / django-browserid

Django application for adding BrowserID support.
Mozilla Public License 2.0
180 stars 80 forks source link

set_unusable_password for newly created users #9

Closed ozten closed 12 years ago

ozten commented 12 years ago

In some cases, django-browserid will create a new user. It should call set_unusable_password before saving the new user.

It should not do this for existing users, since some apps might support multiple authentication backends.

skorokithakis commented 12 years ago

It does. From https://docs.djangoproject.com/en/dev/topics/auth/:

If no password is provided, set_unusable_password() will be called.

Osmose commented 12 years ago

By golly, he's right! :)