CODEWITHSUNDEEP
djangoadmin
Dominic M.
Dominic M.

Reputation: 913

Overriding Django Admin with AllAuth

I don't feel that the original django admin login is secure, so I want to have /admin always redirect to my AllAuth login page, even if the user is logged in.

urls.py

admin.site.login = login_required(admin.site.login)

This will redirect users from the django admin login page if they are not logged in, but it does not redirect users if they ARE logged in. So they can still brute force it. How do I edit the login_required decorator to check for is_superuser.

Upvotes: 1

Views: 826

Answers (1)

Arpit Svt
Arpit Svt

Reputation: 1203

You can use:

from django.contrib.auth.decorators import user_passes_test

admin.site.login  = user_passes_test(lambda u: u.is_superuser)(admin.site.login)

Upvotes: 2

Related Questions