rest_framework框架实现之（认证）

#models.py
from django.db import models

class UserInfo(models.Model):
    user_type_choices=(
        (1,‘普通用户‘),
        (2,‘VIP‘),
        (3,"SVIP")
    )
    user_type=models.IntegerField(choices=user_type_choices)
    username=models.CharField(max_length=32,unique=True)
    password=models.CharField(max_length=32)

class UserToken(models.Model):
    user=models.OneToOneField(to=‘UserInfo‘) #默认就是UserInfo表的id
    token=models.CharField(max_length=64)

#views.py
def md5(user):
    import hashlib,time
    ctime=str(time.time())
    m=hashlib.md5(bytes(user,encoding=‘utf-8‘))  #使用bytes方法直接让str变成bytes
    m.update(bytes(ctime,encoding=‘utf-8‘))
    return m.hexdigest()

#views.py

from rest_framework.views import exceptions
from api import models
from rest_framework.authentication import BaseAuthentication
#BaseAuthentication类强制要求重写 authenticate函数，要不然抛出异常 .authenticate() must be overridden

class Auth_yanzheng(BaseAuthentication):
    def authenticate(self, request):
        token = request._request.GET.get(‘token‘)
        token_obj = models.UserToken.objects.filter(token=token).first()
        if not token_obj:
            raise exceptions.AuthenticationFailed(‘用户认证失败‘)
        # 在rest framework内部将两个字段赋值给request，以供后续操作使用
        return (token_obj.user, token_obj) #返回元组

    def authenticate_header(self, request): #这个要写要不然报错
        pass

#views.py
class AuthView(APIView): #根据用户登录，找出token，有就更新，没有就新建def post(self,request,*args,**kwargs):
        ret={‘code‘:1000,‘msg‘:None}
        try:
            user=request._request.POST.get(‘username‘)
            pwd=request._request.POST.get(‘password‘)
            obj=models.UserInfo.objects.filter(username=user,password=pwd).first()

            if not obj:
                ret[‘code‘]=1001
                ret[‘msg‘]=‘用户名或密码错误‘
            token=md5(user)
            models.UserToken.objects.update_or_create(user=obj,defaults={‘token‘:token}) #注意update_or_create方法
            ret[‘token‘]=token
        except Exception as e:
            print(e)
            ret[‘code‘]=1002
            ret[‘msg‘]=‘请求异常‘

        return JsonResponse(ret)

ORDER_DICT={
    1:{
        ‘name‘:"hehe",
        ‘age‘:18,
        ‘gender‘:‘男‘,
        ‘content‘:"..."
    },
    2: {
        ‘name‘: "go",
        ‘age‘: 19,
        ‘gender‘: ‘男‘,
        ‘content‘: "..."
    }
}

class OrderView(APIView):
    authentication_classes = [Auth_yanzheng]
    def get(self,request,*args,**kwargs):
        # token=request._request.GET.get(‘token‘)
        # if not token:
        #     return HttpResponse(‘用户未登录‘)
       
        ret={‘code‘:1000,‘msg‘:None,‘data‘:None}
        try:
            ret[‘data‘]=ORDER_DICT             #ORDER_DICT是我们给成功认证的用户看的东西
        except Exception as e:
            pass
        return JsonResponse(ret)