Method user_can_authenticate

django/contrib/auth/backends.py:96–101

Reject users with is_active=False. Custom user models that don't have that attribute are allowed.

(self, user)

            return user

    def user_can_authenticate(self, user):
        """
        Reject users with is_active=False. Custom user models that don't have
        that attribute are allowed.
        """
        return getattr(user, "is_active", True)

    def _get_user_permissions(self, user_obj):
        return user_obj.user_permissions.all()