Changeset 2954

Timestamp:

05/21/06 21:46:55 (2 years ago)

Author:

adrian

Message:

Fixed #849 -- Improved login_required view decorator to save query-string parameters. Also added documentation on the django.contrib.auth.views.login view to docs/authentication.txt

Files:

• django/trunk/django/contrib/auth/decorators.py (modified) (2 diffs)
• django/trunk/docs/authentication.txt (modified) (1 diff)

django/trunk/django/contrib/auth/decorators.py

@@ -1 +1 @@
-from django.contrib.auth import LOGIN_URL, REDIRECT_FIELD_NAME
-from django.http import HttpResponseRedirect
+from urllib import quote
-
-def user_passes_test(test_func, login_url=LOGIN_URL):
@@ -12 +13 @@
-            if test_func(request.user):
-                return view_func(request, *args, **kwargs)
-request.path
+quote(request.get_full_path())
-
-        return _checklogin

django/trunk/docs/authentication.txt

@@ -331 +331 @@
-      free to assume the user is logged in.
-
+Note that you'll need to map the appropriate Django view to ``/accounts/login/``.
+To do this, add the following line to your URLconf::
+
+    (r'^accounts/login/$', 'django.contrib.auth.views.login'),
+
+Here's what ``django.contrib.auth.views.login`` does::
+
+    * If called via ``GET``, it displays a login form that POSTs to the same
+      URL. More on this in a bit.
+
+    * If called via ``POST``, it tries to log the user in. If login is
+      successful, the view redirects to the URL specified in ``next``. If
+      ``next`` isn't provided, it redirects to ``/accounts/profile/`` (which is
+      currently hard-coded). If login isn't successful, it redisplays the login
+      form.
+
+It's your responsibility to provide the login form in a template called
+``registration/login.html``. This template gets passed three template context
+variables:
+
+    * ``form``: A ``FormWrapper`` object representing the login form. See the
+      `forms documentation`_ for more on ``FormWrapper`` objects.
+    * ``next``: The URL to redirect to after successful login. This may contain
+      a query string, too.
+    * ``site_name``: The name of the current ``Site``, according to the
+      ``SITE_ID`` setting.
+
+Here's a sample ``registration/login.html`` template you can use as a starting
+point. It assumes you have a ``base.html`` template that defines a ``content``
+block::
+
+    {% extends "base.html" %}
+
+    {% block content %}
+
+    {% if form.has_errors %}
+    <p>Your username and password didn't match. Please try again.</p>
+    {% endif %}
+
+    <form method="post" action=".">
+    <table>
+    <tr><td><label for="id_username">Username:</label></td><td>{{ form.username }}</td></tr>
+    <tr><td><label for="id_password">Password:</label></td><td>{{ form.password }}</td></tr>
+    </table>
+
+    <input type="submit" value="login" />
+    <input type="hidden" name="next" value="{{ next }}" />
+    </form>
+
+    {% endblock %}
+
+.. _forms documentation: http://www.djangoproject.com/documentation/forms/
+
-Limiting access to logged-in users that pass a test
----------------------------------------------------