login_required -- 登录验证

login_required -- 登录验证

方法源码:

def login_required(function=None, redirect_field_name=REDIRECT_FIELD_NAME, login_url=None):
    """
    Decorator for views that checks that the user is logged in, redirecting
    to the log-in page if necessary.
    """
    actual_decorator = user_passes_test(
        lambda u: u.is_authenticated,
        login_url=login_url,
        redirect_field_name=redirect_field_name
    )
    if function:
        return actual_decorator(function)
    return actual_decorator

# user_passes_test源码
def user_passes_test(test_func, login_url=None, redirect_field_name=REDIRECT_FIELD_NAME):
    """
    Decorator for views that checks that the user passes the given test,
    redirecting to the log-in page if necessary. The test should be a callable
    that takes the user object and returns True if the user passes.
    """

    def decorator(view_func):
        @wraps(view_func)
        def _wrapped_view(request, *args, **kwargs):
            if test_func(request.user):
                return view_func(request, *args, **kwargs)
            path = request.build_absolute_uri()
            resolved_login_url = resolve_url(login_url or settings.LOGIN_URL)
            # If the login url is the same scheme and net location then just
            # use the path as the "next" url.
            login_scheme, login_netloc = urlparse(resolved_login_url)[:2]
            current_scheme, current_netloc = urlparse(path)[:2]
            if ((not login_scheme or login_scheme == current_scheme) and
                    (not login_netloc or login_netloc == current_netloc)):
                path = request.get_full_path()
            from django.contrib.auth.views import redirect_to_login
            return redirect_to_login(
                path, resolved_login_url, redirect_field_name)
        return _wrapped_view
    return decorator

使用方法:

login_url取值方法:resolved_login_url = resolve_url(login_url or settings.LOGIN_URL) 默认会跳转到/accounts/login/页面进行重新登录.可以自己定义登录页面的url为/accounts/login/或在设置(settings.py)中设置LOGIN_URL覆盖默认设置.推荐还是遵循django源码,自己定义登录页面的url为/accounts/login/

# 普通写法
from django.contrib.auth.decorators import login_required

@login_required(login_url='/accounts/login/')
def my_view(request):
    ...

# 通用视图:
from django.urls import path
from rest_framework.urlpatterns import format_suffix_patterns
from django.contrib.auth.decorators import login_required
from okr import views

urlpatterns = [
    path("accounts/login/", views.LoginView.as_view(), name="login"),
    path("home/", login_required(views.HomeView.as_view()), name="home")
]