We should use one instead of find_one to really make sure there's only

one such user in the database

diff --git a/mediagoblin/auth/views.py b/mediagoblin/auth/views.py
index 03c315768f3a34f8ac8fa04865b05641f29fb396..d56dfa43513cfa491b5803c05f93a58ced3ba1b8 100644 (file)
--- a/mediagoblin/auth/views.py
+++ b/mediagoblin/auth/views.py
@@ -79,7 +79,7 @@ def login(request):
     login_failed = False
 
     if request.method == 'POST' and login_form.validate():
-        user = request.db.User.find_one(
+        user = request.db.User.one(
             {'username': request.POST['username']})
 
         if user and user.check_login(request.POST['password']):