Commit bd7c879d authored by Marten Kenbeek's avatar Marten Kenbeek Committed by Tim Graham
Browse files

[1.8.x] Stressed authentication should be successful before logging in a user. 

Backport of 8e744fa1 from master
parent 2bef57f3

docs/topics/auth/default.txt

+2 −2
Original line number Diff line number Diff line
@@ -354,8 +354,8 @@ If you have an authenticated user you want to attach to the current session 


.. admonition:: Calling ``authenticate()`` first



    When you're manually logging a user in, you *must* call

    :func:`~django.contrib.auth.authenticate()` before you call

    When you're manually logging a user in, you *must* successfully authenticate

    the user with :func:`~django.contrib.auth.authenticate()` before you call

    :func:`~django.contrib.auth.login()`.

    :func:`~django.contrib.auth.authenticate()`

    sets an attribute on the :class:`~django.contrib.auth.models.User` noting