Authenticated users must be able to change their password

stevenpi / Link.Python.Django.DiyBlog

This blog is based on the assessment found [here](https://developer.mozilla.org/en-US/docs/Learn/Server-side/Django/django_assessment_blog).

MIT License

0 stars 0 forks source link

Authenticated users must be able to change their password #32

Closed mbaechtold closed 6 years ago

mbaechtold commented 6 years ago

Maybe you could use the views PasswordChangeView and PasswordChangeDoneView for this. See https://docs.djangoproject.com/en/2.0/topics/auth/default/#module-django.contrib.auth.views for more information.

⚠️Users which are authenticated via the Google login probably don't have a password stored in the database (or it should be set to "unusable"), so they should not be able to change their password.