jpulgarin/django-tokenapi — pull request #7 by numegil (2012-04-22 02:05:19+00:00)
Title: Don't allow inactive users to authenticate

I added an optional setting called TOKEN_CHECK_ACTIVE_USER, which defaults to False.

If it's set to True, then the token framework won't allow inactive users to pass through.

(completely backwards compatible if the setting isn't set to anything)