From ac4b0d37a7a29a059fecfe708df72546104c28bb Mon Sep 17 00:00:00 2001 From: Ihsan Ullah Date: Wed, 2 Aug 2023 18:02:10 +0500 Subject: [PATCH] do not allow in active users to login with email --- src/apps/profiles/backends.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/apps/profiles/backends.py b/src/apps/profiles/backends.py index dd5cdd502..082354685 100644 --- a/src/apps/profiles/backends.py +++ b/src/apps/profiles/backends.py @@ -10,7 +10,10 @@ def authenticate(self, request, username=None, password=None, **kwargs): try: user = User.objects.get(email=username) if user.check_password(password): - return user + if user.is_active: + return user + else: + return None else: return None except ObjectDoesNotExist: