[Answer]-Django request.session.save() authentication

by

1👍

✅

I’ve done this before, we have a session middleware (we wrote) that looks to see if the current user logged in is a valid user or not.

On the login we do the following

def login(request, username, password):
    # not the actual code, but you get the gist
    logged_in_user = authenticate(username, password)
    request['cur_user'] = logged_in_user.username

If that variable is not set or is not set to a proper username we bounce the user and clear out the session.

This will log in the user, essentially you just have to track that variable in your code to ensure that the session has a valid user attached to it.

👤Mike McMahon

Leave a comment