Django rest-framework框架-认证组件的简单实例
第一版 ：
自己写函数实现用户认证
#models
from django.db import models
#用户表
class UserInfo(models.Model):
user_type_choices=((1,'普通用户'),(2,'VIP'),(3,'SVIP'))
user_type = models.IntegerField(choices=user_type_choices)
username = models.CharFiled(max_length=32,uniquw=True)
password = models.CharFiled(max_length=64)
# 用登录成功的token
class UserToken(models.Model):
user = models.OneToOneFiled(to='UserInfo')
token = models.CharFiled(max_length=64)
# urls
uplpatters= [
url(r'^api/v1/auth/$', views.AuthView.as_view()),
]
#views
from rest_framework.views import APIView
from api import models
# 生成随机字符串
def Md5(user):
import hashlib
import time
ctime = str(time.time())
m = hashlib,md5(bytes(user,encodeing='utf-8'))
m.update(bytes(ctime,encodeing='utf-8'))
return m.hexdigest()
class AuthView(APIView):
"""
用户登录认证
"""
def post(self,request,*args,**kwargs):
try:
user = request._reqeust.POST.get('username')
pwd = request._reqeust.POST.get('password')
obj = models.UserInfo.objects.filter(username=user,password=pwd).first()
if not obj:
ret['code'] = 1001
ret['msg'] = '用户名密码错误'
# 为用户创建token
token = Md5(user)
# 如果存在token就更新 不存在就创建
models.UserToken.objects.update_or_create(user=obj,defualts={'token':token})
ret['token'] = token
except Exception as e:
ret['code'] = 1002
ret['msg'] = '请求异常'
return JsonResponse()
ORDER_DICT = {
1:{
'name': 'x',
'age': 18,
'gender':'y',
'content': '...'
},
2:{
'name': 'z',
'age': 18,
'gender': 'h',
'content': '...'
}
}
class OrderView(APIView):
"""
订单业务
"""
def get(self, request, *args,**kwargs):
# token验证
token = request._reqeust.GET.get('token')
if not token:
return HttpResponse('用户未登录')
ret={'code':1000,'msg':None,'data':None}
try:
ret['data'] = ORDER_DICT
except Exception as e:
pass
return JsonResponse(ret)
第二版： 改进版
使用restramework的authentication功能实现用户认证
#models
from django.db import models
#用户表
class UserInfo(models.Model):
user_type_choices=((1,'普通用户'),(2,'VIP'),(3,'SVIP'))
user_type = models.IntegerField(choices=user_type_choices)
username = models.CharFiled(max_length=32,uniquw=True)
password = models.CharFiled(max_length=64)
# 用登录成功的token
class UserToken(models.Model):
user = models.OneToOneFiled(to='UserInfo')
token = models.CharFiled(max_length=64)
# urls
uplpatters= [
url(r'^api/v1/auth/$', views.AuthView.as_view()),
]
#views
from rest_framework.views import APIView
from api import models
# 生成随机字符串
def Md5(user):
import hashlib
import time
ctime = str(time.time())
m = hashlib,md5(bytes(user,encodeing='utf-8'))
m.update(bytes(ctime,encodeing='utf-8'))
return m.hexdigest()
class AuthView(APIView):
"""
用户登录认证
"""
def post(self,request,*args,**kwargs):
try:
user = request._reqeust.POST.get('username')
pwd = request._reqeust.POST.get('password')
obj = models.UserInfo.objects.filter(username=user,password=pwd).first()
if not obj:
ret['code'] = 1001
ret['msg'] = '用户名密码错误'
# 为用户创建token
token = Md5(user)
# 如果存在token就更新 不存在就创建
models.UserToken.objects.update_or_create(user=obj,defualts={'token':token})
ret['token'] = token
except Exception as e:
ret['code'] = 1002
ret['msg'] = '请求异常'
return JsonResponse()
ORDER_DICT = {
1:{
'name': 'x',
'age': 18,
'gender':'y',
'content': '...'
},
2:{
'name': 'z',
'age': 18,
'gender': 'h',
'content': '...'
}
}
from rest_framework.request import Request
from rest_framework import exceptions
class Authtication(object):
"""
用户登录认证类
"""
def authenticate(self, request):
token = request._reqeust.GET.get('token')
token_obj = models.UserToken.objects.filter(token=token).first()
if not token_obj:
raise exceptions.AuthenticationFiled('用户认证失败')
# 在restframework 内部会将这两个字段 赋值给request， 以供后续操作使用
return (token_obj.user, token_obj)
def anthentication_header(self,request):
pass
class OrderView(APIView):
"""
订单业务
"""
# restframework 自带功能能够验证 用户是否登录
authentication = [Authtication,]
def get(self, request, *args,**kwargs):
ret={'code':1000,'msg':None,'data':None}
try:
ret['data'] = ORDER_DICT
except Exception as e:
pass
return JsonResponse(ret)
rest_framework源码执行流程：
流程：
0-----------
authentication_class = api_settings.DEFAULT_AUTHENTICATION_CLASSES
1-----------
def dispatch():
self.initial(request)
2-----------
def initial():
self.perform_authenticate()
3-----------
def perform_authenticate():
reuqest.user
4-----------
@porperty
def user():
_authenticate()
5-----------
def _anthenticate():
循环认证类所有对象
6-----------
anthentication_class = [Authenticate,]
7-----------
Authenticate() 执行自定义的验证方法
返回 user对象 和 token对象
全局配置：
REAT_FRAMEWORK = {
'DEFAULT_AUTNENTICATINO_CLASSES': ['api.utils.auth.Authtication',]
}
局部不使用：
class OrderView(APIView):
"""
订单业务
"""
# 写一个空列表 就可以到达不用使用authentication_classes = [Authtication,] 达到不用登录验证的目的
authentication_classes = []
def get(self, request, *args,**kwargs):
return JsonResponse(ret)
配置匿名用户：
REAT_FRAMEWORK = {
# 推荐配置restframework的匿名用户为None
"UNAUTHENTCATION_USER": None， # request.user = None
"UNAUTHENTICATION_TOKEN" None, # request.token = None
}
第三版：
继承BaseAuthentication
from rest_framework.authentication import BaseAuthentication
class Authtication(BaseAuthentication):
"""
用户登录认证类
"""
def authenticate(self, request):
token = request._reqeust.GET.get('token')
token_obj = models.UserToken.objects.filter(token=token).first()
if not token_obj:
raise exceptions.AuthenticationFiled('用户认证失败')
# 在restframework 内部会将这两个字段 赋值给request， 以供后续操作使用
return (token_obj.user, token_obj)
1. 必须继承BaseAuthentication类
2. 必须实现anthenticate方法
