Django REST framework之认证组件实例以及源码流程分析

 1 from django.db import models
 2 
 3 
 4 class UserInfo(models.Model):
 5     user_choices_type = (
 6         (1, ‘普通用户‘),
 7         (2, ‘vip用户‘),
 8         (3, ‘svip用户‘),
 9     )
10     user_type = models.IntegerField(choices=user_choices_type)
11     username = models.CharField(max_length=32, unique=True)
12     password = models.CharField(max_length=64)
13 
14 
15 class UserToken(models.Model):
16     user = models.OneToOneField(to=‘UserInfo‘, on_delete=models.CASCADE)
17     token = models.CharField(max_length=64)

1 urlpatterns = [
2     re_path(‘api/v1/auth/$‘, views.AuthView.as_view()),
3     re_path(‘api/v1/order/$‘, views.OrderView.as_view()),
4 ]

 1 #!/usr/bin/env python
 2 # -*- coding:utf-8 -*-
 3 
 4 from rest_framework.authentication import BaseAuthentication
 5 from rest_framework.exceptions import AuthenticationFailed
 6 from api import models
 7 
 8 
 9 class Authticate(BaseAuthentication):
10 
11     def authenticate(self, request):
12         token = request._request.GET.get(‘token‘)
13         token_obj = models.UserToken.objects.filter(token=token).first()
14         if not token_obj:
15             raise AuthenticationFailed(‘用户认证失败‘)
16         return (token_obj.user, token_obj)
17 
18     def authenticate_header(self, request):
19         """
20         认证失败之后返回给浏览器响应头
21         :param request:
22         :return:
23         """
24         pass

 1 from django.http import JsonResponse
 2 from rest_framework.views import APIView
 3 from api import models
 4 
 5 
 6 order_dict = {
 7     1: {
 8         ‘name‘: ‘拉皮条‘,
 9         ‘age‘: 18,
10         ‘gengder‘: ‘男‘,
11         ‘content‘: ‘买了个充气的‘
12     },
13     2: {
14         ‘name‘: ‘热狗‘,
15         ‘age‘: 18,
16         ‘gengder‘: ‘男‘,
17         ‘content‘: ‘买了个非酋‘
18     }
19 }
20 
21 
22 def md5(user):
23     import hashlib
24     import time
25     ctime = str(time.time())
26     m = hashlib.md5(user.encode(‘utf8‘))
27     m.update(ctime.encode(‘utf8‘))
28     return m.hexdigest()
29 
30 
31 class AuthView(APIView):
32     """
33     登录相关的逻辑
34     """
35     authentication_classes = []
36     def post(self, request, *args, **kwargs):
37 
38         ret = {‘code‘: 1000, ‘msg‘: None, ‘token‘: None}
39         try:
40             user = request._request.POST.get(‘username‘)
41             pwd = request._request.POST.get(‘password‘)
42             obj = models.UserInfo.objects.filter(username=user, password=pwd).first()
43             if not obj:
44                 ret[‘code‘] = 1001
45                 ret[‘msg‘] = ‘用户名或者密码错误‘
46             # 为登录用户创建token
47             token = md5(user)
48             models.UserToken.objects.update_or_create(user=obj, defaults={‘token‘: token})
49             ret[‘token‘] = token
50         except Exception as e:
51             ret[‘code‘] = 1002
52             ret[‘msg‘] = ‘请求异常‘
53 
54         return JsonResponse(ret)
55 
56 
57 class OrderView(APIView):
58     """
59     订单相关业务
60     """
61 
62     def get(self, request, *args, **kwargs):
63         print(request.user, request.auth)
64         ret = {‘code‘: 2000, ‘msg‘: None, ‘data‘: None}
65         try:
66             ret[‘data‘] = order_dict
67         except Exception as e:
68             ret[‘code‘] = 2001
69             ret[‘msg‘] = ‘请求异常‘
70         return JsonResponse(ret)

1 REST_FRAMEWORK = {
2     ‘DEFAULT_AUTHENTICATION_CLASSES‘: [‘api.utils.auth.Authticate‘, ],
3     # ‘DEFAULT_AUTHENTICATION_CLASSES‘: [],  # AnonymousUser None配置文件中有
4     # ‘UNAUTHENTICATED_USER‘: lambda: ‘匿名用户‘,
5     # ‘UNAUTHENTICATED_USER‘: None,
6     # ‘UNAUTHENTICATED_TOKEN‘: None,
7 }