Set unusable password for new created users
pandafy opened this issue · comments
I see the changelog mentions setting unusable password on the user object, but I can't find it in the code.
Perhaps, this change was lost while deprecating configure_user
method?
If the user is not present on the system (when the user is first created), then this code will be triggered
djangosaml2/djangosaml2/backends.py
Lines 291 to 298 in 169fc48
And, this does not set an unusable password.
@peppelinux I opened #399 after updating an existing test case to verify that the created user has a usable_password
.
Please check the logs of the Ci build https://github.com/IdentityPython/djangosaml2/actions/runs/7913492573/job/21601260980?pr=399#step:5:740