views:

83

answers:

1

I'm using django.contrib.auth.views.login to log in users. When login is failed, the user and password fields get posted back to the form.

What's the proper way to clean those?

+3  A: 

Pass render_value=False when you create your password field's PasswordInput widget.

class YourAuthenticationForm(AuthenticationForm):
    password = forms.CharField(widget=forms.PasswordInput(render_value=False))
istruble