auth.update_session_auth_hash()

update_session_auth_hash(request, user) [source]

This function takes the current request and the updated user object from which the new session hash will be derived and updates the session hash appropriately. Example usage:

from django.contrib.auth import update_session_auth_hash

def password_change(request):
    if request.method == 'POST':
        form = PasswordChangeForm(user=request.user, data=request.POST)
        if form.is_valid():
            form.save()
            update_session_auth_hash(request, form.user)
    else:
        ...

Note

Since get_session_auth_hash() is based on SECRET_KEY, updating your site to use a new secret will invalidate all existing sessions.

Links:

https://docs.djangoproject.com/en/1.10/topics/auth/default/#django.contrib.auth.update_session_auth_hash

doc_Django

2025-01-10 15:47:30

Comments