From 0e2901b62bdde40d91b6c0272ad60d10861754f0 Mon Sep 17 00:00:00 2001
From: Herbert Kruitbosch <H.T.Kruitbosch@rug.nl>
Date: Fri, 4 May 2018 17:09:13 +0200
Subject: [PATCH] agree create 3

---
 rugwebsite/urls.py  |  2 ++
 rugwebsite/views.py | 10 ++++++----
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/rugwebsite/urls.py b/rugwebsite/urls.py
index 751c549..951746b 100755
--- a/rugwebsite/urls.py
+++ b/rugwebsite/urls.py
@@ -8,3 +8,5 @@ urlpatterns = [
     url(r'', include(saml_urls, namespace='saml')),
     url(r'$', home),
 ]
+
+import django.contrib.auth
\ No newline at end of file
diff --git a/rugwebsite/views.py b/rugwebsite/views.py
index 172950c..8da8c2d 100644
--- a/rugwebsite/views.py
+++ b/rugwebsite/views.py
@@ -1,6 +1,7 @@
 import json
 import hashlib
 
+from django.contrib.auth import login
 from django.contrib.auth.decorators import login_required
 from django.contrib.auth.models import User
 from django.shortcuts import render, redirect
@@ -41,10 +42,11 @@ def gdpr_create_agree(request):
         sha256 = hashlib.sha256()
         sha256.update(data.encode('utf-8'))
         assert request.session.get('samlPersoonsgegevensHash', None) == sha256.hexdigest(), "Persoonsgegevens have been tinkered with"
-        request.user = User()
-        request.user.username, request.user.first_name, request.user.last_name, request.user.email = json.loads(data)
-        request.user.is_active = True
-        request.user.save()
+        user = User()
+        user.username, user.first_name, user.last_name, user.email = json.loads(data)
+        user.is_active = True
+        user.save()
+        login(request, user, backend=None)
 
         return render(request, 'rugwebsite/gdpr_agree_success.html', {'shownav': True})
     else: