mirror of
				https://github.com/ae-utbm/sith.git
				synced 2025-10-31 09:03:06 +00:00 
			
		
		
		
	remove the honeypot from the login page
Des utilisateurs humains se font régulièrement "éclairer" par le honeypot. Les mesures anti-bot ne devraient pas bloquer des humains.
This commit is contained in:
		
				
					committed by
					
						 Bartuccio Antoine
						Bartuccio Antoine
					
				
			
			
				
	
			
			
			
						parent
						
							7cc13ea669
						
					
				
				
					commit
					486047b929
				
			| @@ -33,7 +33,6 @@ | ||||
|     {% endif %} | ||||
|  | ||||
|     {% csrf_token %} | ||||
|     {% render_honeypot_field %} | ||||
|  | ||||
|     <div> | ||||
|       <label for="{{ form.username.name }}">{{ form.username.label }}</label> | ||||
|   | ||||
| @@ -146,39 +146,20 @@ class TestUserLogin: | ||||
|         """Should not login a user correctly.""" | ||||
|         response = client.post( | ||||
|             reverse("core:login"), | ||||
|             { | ||||
|                 "username": user.username, | ||||
|                 "password": "wrong-password", | ||||
|                 settings.HONEYPOT_FIELD_NAME: settings.HONEYPOT_VALUE, | ||||
|             }, | ||||
|             {"username": user.username, "password": "wrong-password"}, | ||||
|         ) | ||||
|         assert response.status_code == 200 | ||||
|         assert ( | ||||
|             '<p class="alert alert-red">Votre nom d\'utilisateur ' | ||||
|             "et votre mot de passe ne correspondent pas. Merci de réessayer.</p>" | ||||
|         ) in str(response.content.decode()) | ||||
|  | ||||
|     def test_login_honeypot(self, client, user): | ||||
|         response = client.post( | ||||
|             reverse("core:login"), | ||||
|             { | ||||
|                 "username": user.username, | ||||
|                 "password": "wrong-password", | ||||
|                 settings.HONEYPOT_FIELD_NAME: settings.HONEYPOT_VALUE + "incorrect", | ||||
|             }, | ||||
|         ) | ||||
|         assert response.status_code == 200 | ||||
|         assert response.wsgi_request.user.is_anonymous | ||||
|  | ||||
|     def test_login_success(self, client, user): | ||||
|         """Should login a user correctly.""" | ||||
|         response = client.post( | ||||
|             reverse("core:login"), | ||||
|             { | ||||
|                 "username": user.username, | ||||
|                 "password": "plop", | ||||
|                 settings.HONEYPOT_FIELD_NAME: settings.HONEYPOT_VALUE, | ||||
|             }, | ||||
|             {"username": user.username, "password": "plop"}, | ||||
|         ) | ||||
|         assertRedirects(response, reverse("core:index")) | ||||
|         assert response.wsgi_request.user == user | ||||
|   | ||||
| @@ -77,7 +77,6 @@ from subscription.models import Subscription | ||||
| from trombi.views import UserTrombiForm | ||||
|  | ||||
|  | ||||
| @method_decorator(check_honeypot, name="post") | ||||
| class SithLoginView(views.LoginView): | ||||
|     """The login View.""" | ||||
|  | ||||
|   | ||||
		Reference in New Issue
	
	Block a user