I was asked by a stakeholder today that they want automatic login when a user registers.
At the moment our app registers → sends an email link → email link takes user to a confirm link → usr can login.
Im happy she is not
My solution I have proposed is to use allauth so people can login with google/icloud etc.
I know you can do automatic login with django e.g.
if response.method == 'POST':
form = RegisterForm(response.POST)
if form.is_valid:
form.save()
username = form.cleaned_data.get('username')
password = form.cleaned_data.get('password1')
user = authenticate(request,username=username, password=password)
if user:
login(request, user)
return redirect..
This feels wrong right?
While researching I was looking for inspiration and was looking at taskrabbit and they have automatic login on registration?!
How do they do that? Do they have some serious AI threat detection in place?