django user logged out after password change

Question

I am having an issue with Django users changing passwords - I have built a few production sites in Django, just none in about a year (or in 1.8), but I don\'t recall having this

Answer 1

For django 1.9:

from django.contrib.auth import update_session_auth_hash

def password_change(request):
    if request.method == 'POST':
        form = PasswordChangeForm(user=request.user, data=request.POST)
        if form.is_valid():
            form.save()
            update_session_auth_hash(request, form.user)

The following fields must be supplied in the POST request:

• old_password
• new_password1
• new_password2

See detailed docs at https://docs.djangoproject.com/en/1.9/topics/auth/default/#session-invalidation-on-password-change