Since commit b1fa8bc the partial authentication is broken in Django (at least for my use case). I've tracked down the problem to the fact that response is no longer stored in the session data. This is due to fact that partial_to_session removes it since b1fa8bc as it does filtering on all elements, while before it did that only on the ones being added from kwargs (response was added unfiltered before and now it's filtered).
However I think the broken piece of code is the one documented as "Clean any MergeDict data type from the values", which obviously does not convert the MergeDict to dict and it's then filtered. I'm not sure how to fix this properly as importing Django specific class into generic PSA code does not sound correct.
Since commit b1fa8bc the partial authentication is broken in Django (at least for my use case). I've tracked down the problem to the fact that
responseis no longer stored in the session data. This is due to fact thatpartial_to_sessionremoves it since b1fa8bc as it does filtering on all elements, while before it did that only on the ones being added from kwargs (responsewas added unfiltered before and now it's filtered).However I think the broken piece of code is the one documented as "Clean any MergeDict data type from the values", which obviously does not convert the MergeDict to dict and it's then filtered. I'm not sure how to fix this properly as importing Django specific class into generic PSA code does not sound correct.