Our great sponsors
-
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
I posted about this on SO but there hasn't been much response. I'm not sure if I'm seeing an bug with Django or if I'm not understanding the situation correctly. I believe that if you install Django and set up a very basic app with a login and logout page, the following will happen. Create an admin and a regular user. User logs in ok. In the admin panel, switch the user to inactive. Now when the user tries to log in, they will get a message saying that their username or password is incorrect. I believe they should get a different error message "this account is inactive." I believe this is what is supposed to happen looking at the authentication form: https://github.com/django/django/blob/main/django/contrib/auth/forms.py