CODEWITHSUNDEEP
djangoauthentication
Santhosh
Santhosh

Reputation: 11834

DJango: authenticate function vs verifying username, password and is_active

I am working on a Django Project:

I have a login form with username and password

Generally i observed authenticate function is used to authenticate a user and pass i.e

user = authenticate(username, password)

I tried to understand the authenticate function but i found it is not so easy.

Instead of using the authenticate function i want to check the authentication the following way:

1) check if the username exists

2) check if the password matches

3) check if is_active is true.

Which i can do by the following way:

username = self.cleaned_data.get('username')
password = self.cleaned_data.get('password')

# check if user exists
try:
    user = User.objects.get(username=username)
except User.DoesNotExist:
    user = None

#check if user is_active
if user.is_active:
    user_active = true
else
    user_active = false

#check the password

if user_active:
    password_match = user.check_password(password):
else:
    password_match = false

if password_match:
    msg = "Login Successful"
else:
    msg = "Login Failed"

Will the above serve the same purpose as authenticate function or is there something else to be checked.

Upvotes: 1

Views: 180

Answers (1)

neverwalkaloner
neverwalkaloner

Reputation: 47374

authenticate method runs through all authenticate backends and call it's authenticate method.

Default Django's auth backend is ModelBackend. If you check it's authenticate method you'll see that it's already include all described by you steps.

Upvotes: 2

Related Questions