Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[#2698] Remove default Django authentication backend #1368

Merged
merged 2 commits into from
Aug 23, 2024

Conversation

pi-sigma
Copy link
Contributor

  • The default Django auth backend is not compatible with our practice of (a) using email as username and (b) allowing duplicate emails for DigiD users, because it checks for duplicate emails regardless of login type
  • The auth backend overrides in the dev settings are redundant and potentially confusing (in case someone overrides base.py for local testing purposes)

Taiga: https://taiga.maykinmedia.nl/project/open-inwoner/issue/2698

    - the default Django auth backend is not compatible with our
      practice of (a) using the email as username and (b) allowing
      duplicate emails for DigiD users, because it checks for duplicate
      usernames regardless of login type
    - the overrides of the auth backends in the dev settings are
      redundant (they don't change anything) and potentially confusing
      (in case someone overrides them in base.py for local testing
      purposes)
@pi-sigma pi-sigma changed the title Issue/2698 duplicate emails [#2698] Duplicate emails Aug 22, 2024
@pi-sigma pi-sigma changed the title [#2698] Duplicate emails [#2698] Remove default Django authentication backend Aug 22, 2024
@codecov-commenter
Copy link

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 95.20%. Comparing base (6eeaea7) to head (65304e2).

Additional details and impacted files
@@           Coverage Diff            @@
##           develop    #1368   +/-   ##
========================================
  Coverage    95.20%   95.20%           
========================================
  Files         1003     1003           
  Lines        37169    37169           
========================================
  Hits         35388    35388           
  Misses        1781     1781           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@pi-sigma
Copy link
Contributor Author

@alextreme The PR assumes that we have no use case of DigiD/eHerkenning users attempting to log in with username + password. Can you confirm this?

@alextreme
Copy link
Member

@alextreme The PR assumes that we have no use case of DigiD/eHerkenning users attempting to log in with username + password. Can you confirm this?

I certainly hope not. Hereby confirmed.

@pi-sigma pi-sigma marked this pull request as ready for review August 22, 2024 13:32
@alextreme alextreme merged commit 8fd99c4 into develop Aug 23, 2024
18 checks passed
@alextreme alextreme deleted the issue/2698-duplicate-emails branch August 23, 2024 08:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants