Understanding Django authentication
summary
Walks through Django’s actual authentication plumbing: how authenticate() and authentication backends iterate and return a user, the default ModelBackend password check and timing fix, and how login stores the user id and backend in the session store (database by default). Demonstrates session middleware behavior, when sessions are created, saved, and expired, how login performs session key rotation while preserving data, and how logout flushes the session so the user becomes anonymous. Shows code paths and worked examples.
AI-written summary · about
chapters (11)
- 0:00Start
- 1:36Authentication in Arts
- 5:00Authentication Types
- 6:13Authentication Factors
- 7:31Auth framework
- 8:47Implementation
- 13:25Session Model
- 13:47Session Store Object
- 17:23Sessions and Authentication
- 19:15Unauthenticated user with session change
- 20:23User authentication
related talks
38mFinally Understand Authentication in Django REST Framework
48mLaravel Authentication Deep Dive
35mExternal authentication for Django projects
21mNever build a login again : The art of using Social Auth with Django
27mDjango User Model: Past, Present, and Future with Will Vincent
37mDjango + Keycloak: trust authentication to the professionals
48mPractical Django Secuirty
26mDeveloping a Single Sign On Service using Django