recently_used validator needs access to request.user

[aclark4life]

No description provided.

[kencochrane]

The recently_used validator should only be used when someone is changing their password, not when they are registering. When someone is changing their password they should be logged in, so the request.user object is available. If they are registering, there is no request.user, or it is of the anonymous user. So if the request.user isn't available or is anonymous, then you can skip that validation, and say it passed.

Does this make sense?

[aclark4life]

No, I mean that if I use a proper django-passwords validator (for a logged in user) it's no longer possible or easy to access self.user, as is done in the non-proper-django-passwords-validator approach. Either way is probably fine, just would have been nice to cram everything in to a proper django-passwords validator. See: 79d2af3

[kencochrane]

Oh, I see. I understand now..