Email + password auth is definitely a wanted feature out-of the box, and probably a good first step would be to create a separate AbstractEmailUser or something like that. Seems to me AbstractUser shouldn't be changed for backwards compatibility reasons, but maybe something like a BaseAbstractUser would be helpful?
And here's a past discussion and ticket (from 5 years ago): https://groups.google.com/d/topic/django-developers/7feYlp9HqKs/discussion https://code.djangoproject.com/ticket/20824 Also related: UserCreationForm by default allows usernames that differ only by case https://code.djangoproject.com/ticket/25617 On Wed, Apr 10, 2019 at 7:12 AM Barnaby <antonin.gr...@gmail.com> wrote: > If we go to the most common use case, email + password is the current > "default" of the web, rather than username + password. It would make sense > for Django to use email + password by default. > > It also feels like first_name and last_name have no place in AbstractUser > and should me moved to NamedAbstractUser or something. > > So we'd remove username, first_name and last_name by default. > > Regarding other means of authentication, I don't know if Django should > support any out-of-the-box. Magic Links could be a decent default but they > do raise security issues and require email setup. > > -- > You received this message because you are subscribed to the Google Groups > "Django developers (Contributions to Django itself)" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to django-developers+unsubscr...@googlegroups.com. > To post to this group, send email to django-developers@googlegroups.com. > Visit this group at https://groups.google.com/group/django-developers. > To view this discussion on the web visit > https://groups.google.com/d/msgid/django-developers/2ec07906-8a2a-4b63-a850-99e8fef95b5a%40googlegroups.com > <https://groups.google.com/d/msgid/django-developers/2ec07906-8a2a-4b63-a850-99e8fef95b5a%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Django developers (Contributions to Django itself)" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-developers+unsubscr...@googlegroups.com. To post to this group, send email to django-developers@googlegroups.com. Visit this group at https://groups.google.com/group/django-developers. To view this discussion on the web visit https://groups.google.com/d/msgid/django-developers/CAFO84S5ki%3DtuPCZyXf2e_%2Bq%3D7V8Q1a6RX3EJycx51BodwnJZBA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
