分别是认证,登入,注销的功能
authenticated():验证是否登录
user = authenticate(username='someone',password='somepassword')
login():登入,并且创建cookie,session
login(request, user)
logout():注销,清除session
logout(request,)
user对象方法
user对象的is_authenticated()方法
def my_view(request):
if not request.user.is_authenticated():
return redirect('%s?next=%s' % (settings.LOGIN_URL, request.path))
创建用户方法
from django.contrib.auth.models import User
user = User.objects.create_user(username='',password='',email='')
修改密码
user = User.objects.get(username='')
user.set_password(password='')
user.save
示例一:修改密码
![](https://i-blog.csdnimg.cn/blog_migrate/8f900a89c6347c561fdf2122f13be562.gif)
![](https://i-blog.csdnimg.cn/blog_migrate/961ddebeb323a10fe0623af514929fc1.gif)
@login_required def set_password(request): user = request.user state = None if request.method == 'POST': old_password = request.POST.get('old_password', '') new_password = request.POST.get('new_password', '') repeat_password = request.POST.get('repeat_password', '') if user.check_password(old_password): if not new_password: state = 'empty' elif new_password != repeat_password: state = 'repeat_error' else: user.set_password(new_password) user.save() return redirect("/log_in/") else: state = 'password_error' content = { 'user': user, 'state': state, } return render(request, 'book/set_password.html', content)
示例二:ajax提交登录并验证
![](https://i-blog.csdnimg.cn/blog_migrate/8f900a89c6347c561fdf2122f13be562.gif)
![](https://i-blog.csdnimg.cn/blog_migrate/961ddebeb323a10fe0623af514929fc1.gif)
def log_in(request): if request.is_ajax(): username=request.POST.get("username") password=request.POST.get("password") valid_code=request.POST.get("valid_code") ajax_response={"user":None,"errors":""} if valid_code.upper()==request.session.get("valid_code").upper(): user=authenticate(username=username,password=password) # 用户验证 if user: login(request,user) # 执行后,相当于设定了cookie和session ajax_response["user"]=user.username else: ajax_response["errors"]="用户名或者密码错误" else: ajax_response["errors"]="验证码错误" return HttpResponse(json.dumps(ajax_response)) return render(request,"login.html")
django也为我们设计好了一个用于此种情况的装饰器:login_requierd(),实现跟is_authenticated()同样功能
from django.contrib.auth.decorators import login_required
@login_required
def my_view(request):
...
若用户没有登录,则会跳转到django默认的 登录URL '/accounts/login/ ' (这个值可以在settings文件中通过LOGIN_URL进行修改)。并传递 当前访问url的绝对路径 (登陆成功后,会重定向到该路径)。