21.9 Putting It All Together

Extraordinarily, there is an enormous amount of work we could still do. We could use the activate URL pattern to reactivate disabled user accounts, and we could add a system to prune unactivated or disabled accounts from the database. We could rewrite the password_reset() and ResendActivationEmailForm to not default to success. We could prompt users to change their passwords every year and warn them when their password is weak. We will do none of these things

The terrible truth of the last three chapters is that you will rarely write your own authentication views.

The auth system provides the ability to build and use custom back ends. These back ends, usually third-party apps (Django apps not provided by Django or ...

Get Django Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.