Fixed #36561 -- Used request.auser() in contrib.auth.aupdate_session_auth_hash().

Author: Xdynix

django/contrib/auth/__init__.py

@@ -408,5 +408,5 @@ def update_session_auth_hash(request, user):
 async def aupdate_session_auth_hash(request, user):
     """See update_session_auth_hash()."""
     await request.session.acycle_key()
-    if hasattr(user, "get_session_auth_hash") and request.user == user:
+    if hasattr(user, "get_session_auth_hash") and await request.auser() == user:
         await request.session.aset(HASH_SESSION_KEY, user.get_session_auth_hash())

tests/async/test_async_auth.py

@@ -143,7 +143,11 @@ async def test_change_password(self):
         await self.client.alogin(username="testuser", password="testpw")
         request = HttpRequest()
         request.session = await self.client.asession()
-        request.user = self.test_user
+
+        async def auser():
+            return self.test_user
+
+        request.auser = auser
         await aupdate_session_auth_hash(request, self.test_user)
         user = await aget_user(request)
         self.assertIsInstance(user, User)