mygpo/users/backend.py

   1 from django.contrib.auth import get_user_model
   2 from django.contrib.auth.backends import ModelBackend
   3
   4 import logging
   5
   6 logger = logging.getLogger(__name__)
   7
   8
   9 class CaseInsensitiveModelBackend(ModelBackend):
  10     """Authenticates with a case-insensitive username"""
  11
  12     def authenticate(self, request, username=None, password=None, **kwargs):
  13         UserModel = get_user_model()
  14         users = UserModel.objects.filter(username__iexact=username).order_by(
  15             "-last_login"
  16         )
  17         users = list(users)
  18         if len(users) == 0:
  19             # Run the default password hasher once to reduce the timing
  20             # difference between an existing and a non-existing user (#20760).
  21             UserModel().set_password(password)
  22             return None
  23
  24         if len(users) > 1:
  25             logger.error("Login with non-unique username: %s", username)
  26
  27         user = users[0]
  28         if user.check_password(password):
  29             return user