The problem is because the iterations in PBKDF2PasswordHasher where updated 
to 15000, so it updates the password, but later, 
SessionAuthenticationMiddleware detects a password change and PUF! the 
login doesn't work.

Right new I've created a PBKDF2PasswordHasher implementation with 
iteartions = 12000 (the old value), but I want to report the issue (I don't 
know if this is a bug) in case it happens to anyone else.

Saving the user returned by authenticate() before calling login() solved 
the issue too, but I dont' want to save the user just in case the password 
changed.

Regards!
Horacio


--
Horacio G. de Oro
Email: [email protected]
Web: http://www.data-tsunami.com
LinkedIn: https://www.linkedin.com/in/hgdeoro

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/django-developers.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/fbe6e681-618b-448f-a7a7-99fb8453752d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to