Settings

ALLAUTH_DEFAULT_AUTO_FIELD = "hashid_field.HashidAutoField"

ALLAUTH_TRUSTED_PROXY_COUNT = 1

# For Cloudflare
ALLAUTH_TRUSTED_CLIENT_IP_HEADER = "CF-Connecting-IP"

# For nginx
ALLAUTH_TRUSTED_CLIENT_IP_HEADER = "X-Real-IP"

ACCOUNT_ADAPTER = "myproject.adapters.MyAccountAdapter"

ACCOUNT_FORMS = {
    'login': 'myproject.forms.MyLoginForm',
    'signup': 'myproject.forms.MySignupForm',
    'add_email': 'myproject.forms.MyAddEmailForm',
    'change_password': 'myproject.forms.MyChangePasswordForm',
    'reset_password': 'myproject.forms.MyResetPasswordForm',
    'reset_password_from_key': 'myproject.forms.MyResetPasswordKeyForm',
    'set_password': 'myproject.forms.MySetPasswordForm',
}

ACCOUNT_PREVENT_ENUMERATION = True

ACCOUNT_TEMPLATE_EXTENSION = "jinja"

# Default configuration
ACCOUNT_SIGNUP_FIELDS = {
    'email': {'required': False},
    'username': {'required': True},
    'password1': {'required': True},
    'password2': {'required': True},
}

# Require email
ACCOUNT_SIGNUP_FIELDS = {
    'email': {'required': True},
    'username': {'required': True},
    'password1': {'required': True},
    'password2': {'required': True},
}

# Email only signup
ACCOUNT_SIGNUP_FIELDS = {
    'email': {'required': True},
    'password1': {'required': True},
}

ACCOUNT_SIGNUP_FORM_CLASS = "myproject.forms.CustomSignupForm"

ACCOUNT_SIGNUP_FORM_HONEYPOT_FIELD = "phone_number"

ACCOUNT_SIGNUP_REDIRECT_URL = "/welcome/"

from allauth.account.app_settings import AppSettings

# Email only
ACCOUNT_LOGIN_METHODS = {AppSettings.LoginMethod.EMAIL}

# Username or email
ACCOUNT_LOGIN_METHODS = {AppSettings.LoginMethod.USERNAME, AppSettings.LoginMethod.EMAIL}

# Phone number
ACCOUNT_LOGIN_METHODS = {AppSettings.LoginMethod.PHONE}

ACCOUNT_LOGIN_TIMEOUT = 1800  # 30 minutes

ACCOUNT_LOGIN_ON_EMAIL_CONFIRMATION = True

ACCOUNT_LOGIN_ON_PASSWORD_RESET = True

ACCOUNT_AUTHENTICATED_LOGIN_REDIRECTS = False

ACCOUNT_LOGIN_BY_CODE_ENABLED = True

# Always required
ACCOUNT_LOGIN_BY_CODE_REQUIRED = True

# Only for password authentication
ACCOUNT_LOGIN_BY_CODE_REQUIRED = {"password"}

ACCOUNT_LOGIN_BY_CODE_MAX_ATTEMPTS = 5

ACCOUNT_LOGIN_BY_CODE_TIMEOUT = 300  # 5 minutes

ACCOUNT_LOGIN_BY_CODE_TRUST_ENABLED = True

ACCOUNT_LOGOUT_ON_GET = True

ACCOUNT_LOGOUT_ON_PASSWORD_CHANGE = True

ACCOUNT_LOGOUT_REDIRECT_URL = "/goodbye/"

from allauth.account.app_settings import AppSettings

ACCOUNT_EMAIL_VERIFICATION = AppSettings.EmailVerificationMethod.MANDATORY

ACCOUNT_EMAIL_VERIFICATION_BY_CODE_ENABLED = True

ACCOUNT_EMAIL_VERIFICATION_BY_CODE_MAX_ATTEMPTS = 5

ACCOUNT_EMAIL_VERIFICATION_BY_CODE_TIMEOUT = 600  # 10 minutes

ACCOUNT_EMAIL_CONFIRMATION_EXPIRE_DAYS = 7

ACCOUNT_EMAIL_CONFIRMATION_HMAC = True

ACCOUNT_CONFIRM_EMAIL_ON_GET = True

ACCOUNT_UNIQUE_EMAIL = True

ACCOUNT_MAX_EMAIL_ADDRESSES = 3

ACCOUNT_CHANGE_EMAIL = True

ACCOUNT_EMAIL_MAX_LENGTH = 191  # For MySQL utf8mb4

ACCOUNT_EMAIL_SUBJECT_PREFIX = "[MyApp] "

ACCOUNT_EMAIL_UNKNOWN_ACCOUNTS = False

ACCOUNT_EMAIL_NOTIFICATIONS = True

ACCOUNT_PASSWORD_MIN_LENGTH = 8

ACCOUNT_PASSWORD_INPUT_RENDER_VALUE = True

ACCOUNT_PASSWORD_RESET_BY_CODE_ENABLED = True

ACCOUNT_PASSWORD_RESET_BY_CODE_MAX_ATTEMPTS = 5

ACCOUNT_PASSWORD_RESET_BY_CODE_TIMEOUT = 300

ACCOUNT_PASSWORD_RESET_TOKEN_GENERATOR = "myproject.auth.CustomTokenGenerator"

ACCOUNT_PHONE_VERIFICATION_ENABLED = False

ACCOUNT_PHONE_VERIFICATION_MAX_ATTEMPTS = 5

ACCOUNT_PHONE_VERIFICATION_TIMEOUT = 600

ACCOUNT_USERNAME_MIN_LENGTH = 3

ACCOUNT_USERNAME_BLACKLIST = ["admin", "root", "administrator"]

ACCOUNT_USERNAME_VALIDATORS = "myproject.validators.custom_username_validators"

ACCOUNT_PRESERVE_USERNAME_CASING = False

ACCOUNT_USER_MODEL_USERNAME_FIELD = "user_name"

ACCOUNT_USER_MODEL_EMAIL_FIELD = "email_address"

ACCOUNT_REAUTHENTICATION_REQUIRED = True

ACCOUNT_REAUTHENTICATION_TIMEOUT = 600  # 10 minutes

ACCOUNT_RATE_LIMITS = {
    "change_password": "5/m/user",
    "manage_email": "10/m/user",
    "reset_password": "20/m/ip,5/m/key",
    "reauthenticate": "10/m/user",
    "reset_password_from_key": "20/m/ip",
    "signup": "20/m/ip",
    "login": "30/m/ip",
    "login_failed": "10/m/ip,5/5m/key",
    "confirm_email": "1/3m/key",
}

# Disable rate limiting
ACCOUNT_RATE_LIMITS = False

ACCOUNT_SESSION_REMEMBER = True

SOCIALACCOUNT_ADAPTER = "myproject.adapters.MySocialAccountAdapter"

SOCIALACCOUNT_AUTO_SIGNUP = False

SOCIALACCOUNT_EMAIL_REQUIRED = True

from allauth.account.app_settings import AppSettings

SOCIALACCOUNT_EMAIL_VERIFICATION = AppSettings.EmailVerificationMethod.NONE

SOCIALACCOUNT_EMAIL_AUTHENTICATION = True

SOCIALACCOUNT_EMAIL_AUTHENTICATION_AUTO_CONNECT = True

SOCIALACCOUNT_FORMS = {
    'signup': 'myproject.forms.MySocialSignupForm',
}

SOCIALACCOUNT_PROVIDERS = {
    'google': {
        'SCOPE': ['profile', 'email'],
        'AUTH_PARAMS': {'access_type': 'online'},
        'APP': {
            'client_id': 'your-client-id',
            'secret': 'your-client-secret',
        }
    }
}

SOCIALACCOUNT_STORE_TOKENS = True

SOCIALACCOUNT_REQUESTS_TIMEOUT = 10

# settings.py
from allauth.account.app_settings import AppSettings

# Email-based authentication with mandatory verification
ACCOUNT_LOGIN_METHODS = {AppSettings.LoginMethod.EMAIL}
ACCOUNT_EMAIL_VERIFICATION = AppSettings.EmailVerificationMethod.MANDATORY
ACCOUNT_SIGNUP_FIELDS = {
    'email': {'required': True},
    'password1': {'required': True},
    'password2': {'required': True},
}

# Custom adapters and forms
ACCOUNT_ADAPTER = "myproject.adapters.MyAccountAdapter"
ACCOUNT_FORMS = {
    'login': 'myproject.forms.MyLoginForm',
    'signup': 'myproject.forms.MySignupForm',
}

# Security settings
ACCOUNT_PREVENT_ENUMERATION = True
ACCOUNT_REAUTHENTICATION_REQUIRED = True
ACCOUNT_EMAIL_NOTIFICATIONS = True

# Email verification by code
ACCOUNT_EMAIL_VERIFICATION_BY_CODE_ENABLED = True
ACCOUNT_EMAIL_VERIFICATION_BY_CODE_TIMEOUT = 600

# Rate limiting
ACCOUNT_RATE_LIMITS = {
    "login": "20/m/ip",
    "signup": "10/m/ip",
}

# Social authentication
SOCIALACCOUNT_AUTO_SIGNUP = True
SOCIALACCOUNT_EMAIL_VERIFICATION = AppSettings.EmailVerificationMethod.NONE
SOCIALACCOUNT_PROVIDERS = {
    'google': {
        'SCOPE': ['profile', 'email'],
        'AUTH_PARAMS': {'access_type': 'online'},
    }
}