#19265: deprecate redirect_to_login
------------------------------------------------+------------------------
               Reporter:  ptone                 |          Owner:  nobody
                   Type:  Cleanup/optimization  |         Status:  new
              Component:  contrib.auth          |        Version:  master
               Severity:  Normal                |       Keywords:
           Triage Stage:  Accepted              |      Has patch:  0
    Needs documentation:  0                     |    Needs tests:  0
Patch needs improvement:  0                     |  Easy pickings:  0
                  UI/UX:  0                     |
------------------------------------------------+------------------------
 redirect_to_login is documented as the only "helper" function in
 contrib.auth - but what it does is relatively useless.

 By itself, it does nothing to ensure that the destination can only be
 reached by logged in users.

 Presumably, if you want to only send someone to a url after logging in,
 you would just use @login_required on the destination, and let it handle
 the redirection.

 This mildly implies that you are somehow limiting who gets to the
 redirected destination - which of course is not true.

 This is as much about cleaning up the docs, as having it documented
 implies that it has some value, of which I'm pretty much missing.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/19265>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to