Login to a Django application from a management command.
pip install django-management-auth
Then, add management_auth to INSTALLED_APPS.
Finally, add the required URLs:
# urls.py
urlpatterns += [path(".login-as", include("management_auth.urls"))]Authentication happens using a short-lived signed URL, generated from a management command.
./manage.py login_as <username>
This will create a URL for <username>. By default, the URLs are valid for 60 seconds (configurable with --timeout).
Where possible, URLs, are displayed fully-qualified, such that they can be quickly clicked to log in.
- To specify manually, use
MANAGEMENT_AUTH_BASE_URL - For Wagtail users,
WAGTAILADMIN_BASE_URLis used to create the URL. - For
django.contrib.sitesusers,SITE_IDis correctly considered
If no base URL is found, a relative path is shown.
- Tokens are only valid for a short amount of time, intended to prevent reuse / sharing.
- Tokens are signed URLs, rather than requiring a database table. This means the validation view is faster and more lightweight, and a database leak doesn't risk exposing sessions.
- Because tokens are signed, they can be used multiple times (however this is a bad idea)
