django-lot

django-lot copied to clipboard

The library can't be used with newest Django. New Django doesn't support patterns(...) anymore. It uses plain brackets instead. Maybe like this? from django.conf.urls import url from . import views...

jannekanerva

I have the problem that users will open multiple tabs from links in emails with login tokens, causing multiple logins, which invalidates the CSRF token. When they try to submit...

mitchelljkotler

An option which will remove the token from the URL get parameters after login. This keeps the URL users see clean.

mitchelljkotler

Specifying LOT_TYPE_CHOICES as the choices for the LOT.type field means that migrations will be created for any types created -- however the migrations are created against the contributed module which...

aidanlister

The middleware can have a behavior of login/logout in the same request

1

Is posible that a developer want to have a request flow like "login -> do an action -> logout", I have to think how to do this, with another middleware,...

jespino

Use an actual UUID field if available

4

See here why it matters: http://dba.stackexchange.com/questions/6912/should-i-invest-the-time-to-change-the-column-type-from-char36-to-uuid There are multiple working implementations but django-extensions contain two different implementations. One that emulates a UUID and uses a char field underneath and one...

thedrow

Django Rest Framework authentication backend

6

The DRF authentication backend's API is different. I can create an authentication backend for it if you want me to.

thedrow

The LOT model should use Django's model validation

9

There are two options here: 1) Instead of https://github.com/jespino/django-lot/blob/master/lot/models.py#L42 we should use clean and raise a validation error if the token has expired. 2) Call verify inside clean and raise...

thedrow