Merge pull request encode#5149 from tomchuk/master

xordoquy · web-flow · commit 1e9e1a5bfeba · 2017-05-18T09:12:47.000Z
Don't trim whitespace from authtoken passwords
diff --git a/rest_framework/authtoken/serializers.py b/rest_framework/authtoken/serializers.py
@@ -6,7 +6,11 @@
 
 class AuthTokenSerializer(serializers.Serializer):
     username = serializers.CharField(label=_("Username"))
-    password = serializers.CharField(label=_("Password"), style={'input_type': 'password'})
+    password = serializers.CharField(
+        label=_("Password"),
+        style={'input_type': 'password'},
+        trim_whitespace=False
+    )
 
     def validate(self, attrs):
         username = attrs.get('username')
diff --git a/tests/test_authtoken.py b/tests/test_authtoken.py
@@ -27,3 +27,9 @@ def test_token_string_representation(self):
     def test_validate_raise_error_if_no_credentials_provided(self):
         with pytest.raises(ValidationError):
             AuthTokenSerializer().validate({})
+
+    def test_whitespace_in_password(self):
+        data = {'username': self.user.username, 'password': 'test pass '}
+        self.user.set_password(data['password'])
+        self.user.save()
+        assert AuthTokenSerializer(data=data).is_valid()
