Eric Fischer 97ac2845c1 Fix for LoginFailure.MultipleObjectsReturned in is_user_locked_out (replay) ...

The get_or_create function is vulnerable to race conditions in MySQL, which can
cause the model LoginFailure to, in some cases, have more than one row for the
same user, breaking the login for that user.

Addinf functionality to expect and clean the error by deleting extra rows (by
oldest lockout date), leaving just one entry and allowing the user to login.

Replayed and squashed by @efischer19, initially commited by @laq

2016-02-25 12:03:28 -05:00

..

auth_exchange

Rebase upgrade Django to v1.8.5

2015-11-10 15:00:19 -05:00

cache_toolbox

Safe Session Cookies Middleware

2016-01-26 17:23:03 -05:00

clean_headers

Add support to enhance the cacheability of course assets.

2016-01-26 21:09:18 -05:00

config_models

Exclude Reverse Foreign Keys from list_display

2016-02-12 08:54:25 -05:00

contentserver

Add support to enhance the cacheability of course assets.

2016-01-26 21:09:18 -05:00

cors_csrf

Remove useless pylint suppressions

2015-11-22 07:41:19 -05:00

course_action_state

Rebase upgrade Django to v1.8.5

2015-11-10 15:00:19 -05:00

course_modes

Only allow ecommerce checkout if user is also activated

2016-02-23 10:11:14 -05:00

dark_lang

Remove uses of using() from migrations

2016-02-01 16:57:26 -05:00

datadog

Remove dogstatsd-python in favor of dogapi

2013-09-11 19:28:58 -04:00

django_comment_common

Remove useless pylint suppressions

2015-11-22 07:41:19 -05:00

edxmako

Merge pull request #11316 from open-craft/remove-django-template-loaders

2016-02-18 20:38:47 +01:00

embargo

Remove uses of using() from migrations

2016-02-01 16:57:26 -05:00

enrollment

Enroll already-existing user to a course via management command.

2016-01-27 11:49:31 -05:00

external_auth

Remove all request.REQUEST usages - replace with request.GET and/or

2016-02-22 09:54:26 -05:00

geoinfo

Add super() calls to setUp/tearDown that are missing them

2015-05-14 18:14:21 -04:00

heartbeat

Rebase upgrade Django to v1.8.5

2015-11-10 15:00:19 -05:00

lang_pref

WL-272

2016-02-10 14:33:38 +05:00

microsite_configuration

fixed get_template_path to work with absolute path also

2016-02-16 11:52:19 +05:00

monitoring

Eliminate instances of unused-import Pylint violation

2015-07-13 17:33:25 -04:00

monkey_patch

Rebase upgrade Django to v1.8.5

2015-11-10 15:00:19 -05:00

performance

Rebase upgrade Django to v1.8.5

2015-11-10 15:00:19 -05:00

pipeline_js

Use django.contrib.staticfiles instead of django-staticfiles.

2015-10-06 19:52:38 +05:00

pipeline_mako

WL-272

2016-02-10 14:33:38 +05:00

request_cache

Revert "Merge DRF 3.1 in to master"

2015-09-28 17:12:43 -04:00

reverification

Rebase upgrade Django to v1.8.5

2015-11-10 15:00:19 -05:00

service_status

Rebase upgrade Django to v1.8.5

2015-11-10 15:00:19 -05:00

session_inactivity_timeout

add middleware to be able to expire inactive sessions after N seconds

2014-01-24 10:36:21 -05:00

static_replace

Fix up the excluded extensions bit.

2016-02-05 12:14:15 -05:00

status

Rebase upgrade Django to v1.8.5

2015-11-10 15:00:19 -05:00

student

Fix for LoginFailure.MultipleObjectsReturned in is_user_locked_out (replay)

2016-02-25 12:03:28 -05:00

terrain

add timeout to lettuce test to reduce flakiness

2016-02-23 12:40:49 -05:00

third_party_auth

Keep SAML configuration check

2016-02-09 16:10:31 +07:00

track

copy event on write

2016-02-12 06:27:53 -05:00

util

making check more generic

2016-02-17 09:22:27 -05:00

xblock_django

[TNL-3962] moving DEPRECATED_ADVANCED_COMPONENT_TYPES to dJango admin

2016-02-08 17:26:49 +05:00

xmodule_django

Rebase upgrade Django to v1.8.5

2015-11-10 15:00:19 -05:00