id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
22362	Authentication Middleware assertion message is only partially correct	Keryn Knight <django@…>	nobody	"Currently, the [https://github.com/django/django/blob/5d263dee304fdaf95e18d2f0619d6925984a7f02/django/contrib/auth/middleware.py#L16 middleware says] ''The Django authentication middleware requires session middleware to be installed. Edit your MIDDLEWARE_CLASSES setting to insert 'django.contrib.sessions.middleware.SessionMiddleware'.'' which is true, but doesn't expound the need for the session middleware to be '''before''' the auth middleware, because it acts on the ''request''.

eg:
{{{
MIDDLEWARE_CLASSES = (
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
)
}}}
would fail the assertion, where
{{{
MIDDLEWARE_CLASSES = (
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
)
}}}
would pass."	Cleanup/optimization	closed	contrib.auth	dev	Normal	fixed			Unreviewed	0	0	0	0	1	0