springload / madewithwagtail

A showcase of sites and apps made with Wagtail CMS, the easy to use, open source Django content management system
http://madewithwagtail.org
MIT License
84 stars 21 forks source link

Django-allauth integration #108

Open mojeto opened 6 years ago

mojeto commented 6 years ago

Ref #70

loicteixeira commented 6 years ago

@mojeto I found out today that there is a WAGTAIL_PASSWORD_MANAGEMENT_ENABLED setting which should be disabled when authentication is handled by a third party. However I'm not sure how this applies here as if I remember correctly, we do both.

mojeto commented 6 years ago

Good spotting @loicteixeira . We allow user password authentication in allauth. So keeping WAGTAIL_PASSWORD_MANAGEMENT_ENABLED means we may set user password in admin - good to keep that option. I would think more about WAGTAIL_PASSWORD_RESET_ENABLED to be set to False otherwise we have two different pages to reset user password.