Thanks Eduardo, I actually extended the User model by making an AbstractBaseUser sub-class. I'm using is_active also but I guess I'm not sure how to implement my flow for registering new users. I suppose I need to extend the classes or models in django.contrib.auth.
I was also just looking at allauth which looks like its probably the way to go, and it looks like its got a lot of awesome functionality related to security too On Friday, August 25, 2017 at 5:35:13 PM UTC-6, Eduardo Balbinot wrote: > > You probably need extra attributes in your User class, which means you > could extend the User class like explained here: > https://docs.djangoproject.com/en/1.11/topics/auth/customizing/#extending-the-existing-user-model > Don't forget you could also work with the *is_active *attribute to > control whether the administrator has / hasn't flagged the account as > active. > > Hope my answer helps you. > > Em sexta-feira, 25 de agosto de 2017 15:31:43 UTC-3, Alexander Joseph > escreveu: >> >> I'm currently using django.contrib.auth for my user authentication which >> works well for simple authentication/authorization but I'd like to expand >> the registration/auth flow a little. >> >> Right now with the default flow users go to the signup page, signup, then >> are redirected to the login page and can immediately sign in. Id like to >> have it so that once the new user signs up they are sent an email >> confirmation. Once they confirm their email their account is flagged >> inactive so they cant login until a site administrator, who receives a >> notification email once they confirm, flags their account as active. Once >> the administrator flags their account as active the user gets another email >> saying their account is approved and they can login. >> >> Is there a library out there that can help me build this so that I dont >> have to build everything myself ontop of the django auth? Thanks >> > -- You received this message because you are subscribed to the Google Groups "Django users" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscr...@googlegroups.com. To post to this group, send email to django-users@googlegroups.com. Visit this group at https://groups.google.com/group/django-users. To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/001d2616-b667-48de-ab09-b00030fc2d1a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
