Django-views，用户认证，login

分别是认证，登入，注销的功能

authenticated():验证是否登录

user = authenticate(username='someone',password='somepassword')

login(request, user)

logout()：注销，清除session

logout(request,)

user对象方法

user对象的is_authenticated()方法

def my_view(request):

  if not request.user.is_authenticated():

    return redirect('%s?next=%s' % (settings.LOGIN_URL, request.path))

创建用户方法

from django.contrib.auth.models import User

user = User.objects.create_user（username='',password='',email=''）

修改密码

user = User.objects.get(username='')

user.set_password(password='')

user.save

示例一：修改密码

@login_required

def set_password(request):

    user = request.user

    state = None

    if request.method == 'POST':

        old_password = request.POST.get('old_password', '')

        new_password = request.POST.get('new_password', '')

        repeat_password = request.POST.get('repeat_password', '')

        if user.check_password(old_password):

            if not new_password:

                state = 'empty'

            elif new_password != repeat_password:

                state = 'repeat_error'

            else:

                user.set_password(new_password)

                user.save()

                return redirect("/log_in/")

        else:

            state = 'password_error'

    content = {

        'user': user,

        'state': state,

    }

    return render(request, 'book/set_password.html', content)

示例二：ajax提交登录并验证

def log_in(request):

    if request.is_ajax():

        username=request.POST.get("username")

        password=request.POST.get("password")

        valid_code=request.POST.get("valid_code")

        ajax_response={"user":None,"errors":""}

        if valid_code.upper()==request.session.get("valid_code").upper():

            user=authenticate(username=username,password=password)  # 用户验证

            if user:

                login(request,user)     # 执行后，相当于设定了cookie和session

                ajax_response["user"]=user.username

            else:

                ajax_response["errors"]="用户名或者密码错误"

        else:

            ajax_response["errors"]="验证码错误"

        return HttpResponse(json.dumps(ajax_response))

    return render(request,"login.html")

django也为我们设计好了一个用于此种情况的装饰器：login_requierd()，实现跟is_authenticated()同样功能

from django.contrib.auth.decorators import login_required

@login_required

def my_view(request):

  ...

若用户没有登录，则会跳转到django默认的登录URL '/accounts/login/ ' (这个值可以在settings文件中通过LOGIN_URL进行修改)。并传递当前访问url的绝对路径 (登陆成功后，会重定向到该路径)。

巴特西

Django-views，用户认证，login_requierd()

最新文章

热门文章