99django_auth

女爷i 2022-01-10 23:07 209阅读 0赞

auth. 1

requirement：... 1

user表：... 2

创建用户：... 3

更改密码：... 4

登录login、登出logout、认证authenticate：... 4

authentication web：... 5

Cookie、Session：... 6

自定义User model：... 7

授权：... 8

permission表：... 8

contenttype表：... 8

group表：... 9

# auth #

django内置了用户认证系统，处理用户账户、用户组、权限，基于cookie的session，且内置了一些快捷函数；

## requirement： ##

mysite/mysite/settings.py

INSTALLED\_APPS = \[

'blog.apps.BlogConfig',

'publish.apps.PublishConfig',

'bootstrap3',

'books.apps.BooksConfig',

'polls.apps.PollsConfig',

'django.contrib.admin',

'django.contrib.auth',

'django.contrib.contenttypes',

'django.contrib.sessions',

'django.contrib.messages',

'django.contrib.staticfiles',

MIDDLEWARE = \[

'django.middleware.security.SecurityMiddleware',

'django.contrib.sessions.middleware.SessionMiddleware',

'django.middleware.common.CommonMiddleware',

'django.middleware.csrf.CsrfViewMiddleware',

'django.contrib.auth.middleware.AuthenticationMiddleware',

'django.contrib.messages.middleware.MessageMiddleware',

'django.middleware.clickjacking.XFrameOptionsMiddleware',

## user表： ##

sqlite> .schema auth\_user

CREATE TABLE IF NOT EXISTS "auth\_user" (

"id" integer NOT NULL PRIMARY KEY AUTOINCREMENT,

"password" varchar(128) NOT NULL,

"last\_login" datetime NULL,

"is\_superuser" bool NOT NULL,

"first\_name" varchar(30) NOT NULL,

"last\_name" varchar(30) NOT NULL,

"email" varchar(254) NOT NULL,

"is\_staff" bool NOT NULL,

"is\_active" bool NOT NULL,

"date\_joined" datetime NOT NULL,

"username" varchar(150) NOT NULL UNIQUE);

user表属性attr，from django.contrib.auth.models import User：

is\_authenticated

is\_anonymous

username\_validator

user表方法：

get\_username

get\_full\_name

get\_short\_name

set\_password

check\_password

set\_unusable\_password

has\_usable\_password

get\_group\_permissions

get\_all\_permissions

has\_perm

has\_module\_perms

emial\_user

anonmoususer表，from django.contrib.auth.models import AnonmousUser：

是User的子类；

## 创建用户： ##

>>> from django.contrib.auth.models import User

>>> user = User.objects.create\_user('jowin','jowin@ane56.com','jowin')   \#方1

>>> user.last\_name = 'chai'

>>> user.save()

(webproject) C:\\webproject\\mysite>python manage.py createsuperuser --username='test' --email='test@ane56.com'   \#方2

Password:

Password (again):

This password is too short. It must contain at least 8 characters.

This password is too common.

Password:

Password (again):

Superuser created successfully.

>>> user=User.objects.get(id=2)

>>> user

<User: 'test'>

>>> user.is\_superuser

True

>>> user.is\_staff

True

>>> jowin=User.objects.get(id=1)

>>> jowin

<User: jowin>

>>> jowin.is\_superuser=True

>>> jowin.is\_staff=True

>>> jowin.save()

## 更改密码： ##

>>> from django.contrib.auth.models import User

>>> u = User.objects.get(username='jowin')

>>> u.set\_password('jowin')

>>> u.save()

(webproject) C:\\webproject\\mysite>python manage.py changepassword 'test'

Changing password for user ''test''

Password:

Password (again):

Password changed successfully for user ''test''

## 登录login、登出logout、认证authenticate： ##

mysite/blog/views.py

from django.contrib.auth import authenticate, login, logout

from django.http import HttpResponse

from django.contrib.auth.decorators import login\_required

def auth\_login(request):

if request.method == 'POST':

username = request.POST.get('username')

password = request.POST.get('password')

user = authenticate(username=username, password=password)   \#认证成功返回用户名，认证失败返回None

if user:

return HttpResponse('login ok')

else:

return HttpResponse('login error')

return render(request, 'blog/login.html')

def auth\_logout(request):

logout(request)

return HttpResponse('logout success')

@login\_required   \#@login\_required()

def index(request):

return render(request, 'blog/index.html')

mysite/blog/templates/blog/index.html

<!DOCTYPE html>

<html>

<head>

<title>Title</title>

</head>

<body>

<h1>index</h1>

</body>

</html>

mysite/blog/templates/blog/login.html

<h1>login form</h1>

\{% csrf\_token %\}

</form>

## authentication web： ##

认证的用户才能登录到指定页面，next=后跟的是登陆成功后的跳转url；

未认证的跳到登录页（用户没有登录会重定向到settings.py中配置的LOGIN\_URL = '/blog/login/'也可在装饰器login\_requrired()中指定login\_url）；

登录成功后

方1，用装饰器：

mysite/blog/views.py

from django.contrib.auth.decorators import login\_required

@login\_required

@login\_required(redirect\_field\_name='go', login\_url="/blog/login")

mysite/mysite/settings.py

方2，手动认证：

def index(request):

if not request.user.is\_authenticated:

return redirect(''.format('/blog/login', request.path))

else:

\# pass   \#do\_something()

return HttpResponse('ok')

## Cookie、Session： ##

http无状态，cookie让http请求时携带状态，cookie保存在browser缓存中，和域名有关；

session是基于cookie来做的，只不过保存了一个session id，所有其它内容都在server端存储，用来鉴别用户是否登录及其它信息，session要比cookie安全；

'\_stream': <django.core.handlers.wsgi.LimitedStream object at 0x00000000040D27B8>,

'csrf\_processing\_done': True,

'COOKIES': \{'csrftoken': '7Ew8ASc6rAcdtMyHNeXQFLybjkruuwocJJSCnfoLuNz3TYMi00TNwIhAyJmsOMUN', 'sessionid': 'j1ta2w8fj42fnv6928s0bz31abeso9q2'\},

'\_read\_started': False,

'\_post\_parse\_error': False,

'content\_type': 'text/plain',

'\_cached\_user': <User: jowin>,

'path': '/blog/',

'session': <django.contrib.sessions.backends.db.SessionStore object at 0x00000000040D27F0>,

'user': <SimpleLazyObject: <User: jowin>>,

'path\_info': '/blog/',

'method': 'GET',

'resolver\_match': ResolverMatch(func=blog.views.index,

args=(),

kwargs=\{\},

url\_name=index,

app\_names=\['blog'\],

namespaces=\['blog'\]),

'content\_params': \{\},

'\_messages': <django.contrib.messages.storage.fallback.FallbackStorage object at 0x00000000040D2A58>,

'environ': \{...\},

'META': \{...\}

request.COOKIES

request.session

from django.contrib.sessions.models import Session

## 自定义User model： ##

用单独的app作用户处理；

mysite/users/models.py

from django.db import models

from django.contrib.auth.models import AbstractUser

class User(AbstractUser):

USER\_ROLE\_CHOICES = (

('SU', 'SuperUser'),

('GA', 'GroupAdmin'),

('CU', 'CommonUser'),

)

name = models.CharField(max\_length=80)

uuid = models.CharField(max\_length=100)

role = models.CharField(max\_length=2, choices=USER\_ROLE\_CHOICES, default='CU')

ssh\_key\_pwd = models.CharField(max\_length=200)

def \_\_str\_\_(self):

return self.name

mysite/mysite/settings.py

AUTH\_USER\_MODEL = 'users.User'

python manage.py makemigrations   \#如有问题删除db.sqlite3文件再执行

python manage.py migrate

# 授权： #

django权限系统实现了全局的授权机制（即，是否有某张表的权限（增加、编辑、删除）），没有提供对象级别的授权（即没有实现表中某个对象的权限（增加、编辑、删除））；

## permission表： ##

from django.contrib.auth.models import Permission

sqlite> .schema auth\_permission

CREATE TABLE IF NOT EXISTS "auth\_permission" (

"id" integer NOT NULL PRIMARY KEY AUTOINCREMENT,

"content\_type\_id" integer NOT NULL REFERENCES "django\_content\_type" ("id"),

"codename" varchar(100) NOT NULL,

"name" varchar(255) NOT NULL);

CREATE UNIQUE INDEX "auth\_permission\_content\_type\_id\_codename\_01ab375a\_uniq" ON "auth\_permission" ("content\_type\_id", "codename");

CREATE INDEX "auth\_permission\_content\_type\_id\_2f476e4b" ON "auth\_permission" ("content\_type\_id");

## contenttype表： ##

from django.contrib.auth.models import ContentType

sqlite> .schema django\_content\_type

CREATE TABLE IF NOT EXISTS "django\_content\_type" (

"id" integer NOT NULL PRIMARY KEY AUTOINCREMENT,

"app\_label" varchar(100) NOT NULL,

"model" varchar(100) NOT NULL);

CREATE UNIQUE INDEX "django\_content\_type\_app\_label\_model\_76bd3d3b\_uniq" ON "django\_content\_type" ("app\_label", "model");

## group表： ##

from django.contrib.auth.models import Group

sqlite> .schema auth\_group

CREATE TABLE IF NOT EXISTS "auth\_group" (

"id" integer NOT NULL PRIMARY KEY AUTOINCREMENT,

"name" varchar(80) NOT NULL UNIQUE);

例，用户权限：

>>> from django.contrib.auth.models import User,Permission,ContentType

>>> User.objects.all()

>>> user = User.objects.create\_user(username='jowin',email='jowin@ane56.com')

>>> User.objects.all()

>>> p = Permission.objects.get(codename='add\_question')

>>> user = User.objects.get(id=1)

>>> user.user\_permissions.add(p)   \#同user.user\_permissions.set(\[p\])

>>> user.has\_perm('polls.add\_question')   \#has\_perm('<app\_label>.<codename>')

True

>>> ct = ContentType.objects.get(app\_label='polls',model='choice')

>>> p = Permission.objects.create(name='Can vote',codename='can\_vote',content\_type=ct)

>>> user.user\_permissions.add(p)

>>> user.has\_perm('polls.can\_vote')

True

例，用户组权限：

>>> from django.contrib.auth.models import User,Permission,Group

>>> sa = Group.objects.create(name='sa')

>>> user = User.objects.get(id=1)

>>> sa.user\_set.add(user)

>>> sa.save()

>>> p = Permission.objects.get(codename='add\_user')

>>> sa.permissions.add(p)   \#同sa.permissions.set(\[p\])

>>> user.has\_perm('auth.add\_user')   \#用户继承用户组的权限

True

sa.permissions.set(\[permission\_list\])

sa.permissions.add(permission,permission,...)

sa.permissions.remove(permission,permission,...)

sa.permissions.clear()

view中使用：

from django.contrib.auth.decorators import permission\_required

@permission\_required('polls.can\_vote', login\_url='/loginpage/')

def my\_view(request):

pass

转载于:https://blog.51cto.com/jowin/2394786

99django_auth

发表评论取消回复

还没有评论，来说两句吧...

相关阅读

相关 Java99乘法表

相关 99乘法表

相关打印99乘法表

相关 jQuery 99乘法表

相关 python 99乘法表

相关 99累加

相关 C99标准

相关 99django_auth

相关 C++ 99表

相关 meltable99乘法表