python 认证_Django 用户认证

内置用户认证

django 的用户分为三类，匿名用户，普通用户，超级用户

普通用户是无法登录admin 后台的的，因此我们的普通视图使用这个用户来管理

超级用户是最高权限，可以登录admin后台，可以使用python manage.py createsuperuser 来创建一个超级用户

内置用户类型

匿名用户.

普通类型

普通用户是无法登录admin 后台的的，因此我们的普通视图使用这个用户来管理

def create_user(self, username, email=None, password=None, **extra_fields):

extra_fields.setdefault('is_staff', False)

extra_fields.setdefault('is_superuser', False)

return self._create_user(username, email, password, **extra_fields)

超级用户

超级用户是最高权限，可以登录admin后台，可以使用python manage.py createsuperuser 来创建一个超级用户

def create_superuser(self, username, email, password, **extra_fields):

extra_fields.setdefault('is_staff', True)

extra_fields.setdefault('is_superuser', True)

用户认证模式 -1： 用户名

我们在用户注册界面使用的是用户名称

使用内值的form from django.contrib.auth.forms import UserCreationForm

创建对应的模板文件signup.html

Sign up

{% csrf_token %}

{{ form.as_p }}

Sign up

：views.py

def signup(request):

"""

使用用户名来注册

:param request:

:return:

"""

if request.method == 'POST':

form = UserCreationForm(request.POST)

if form.is_valid():

form.save()

username = form.cleaned_data.get('username')

raw_password = form.cleaned_data.get('password1')

user = authenticate(username=username, password=raw_password)

login(request, user)

return redirect('article-list')

else:

form = UserCreationForm()

return render(request, 'pre_user/signup.html', {'form': form})

截图如下

用户认证模式2： 有附加字段

在某些特殊情况下我们可能会在用户注册的时候需要输入生日这个样子的字段，但是User 并不包含该字段，因此我们需要扩展User 模型

models.py

class Profile(models.Model):

""" 多余字段注册 """

user = models.OneToOneField(User, on_delete=models.CASCADE)

bio = models.TextField(max_length=500, blank=True)

location = models.CharField(max_length=30, blank=True)

birth_date = models.DateField(null=True, blank=True)

@receiver(post_save, sender=User)

def update_user_profile(sender, instance, created, **kwargs):

if created:

Profile.objects.create(user=instance)

instance.profile.save()

forms.py

class SignUpForm(UserCreationForm):

birth_date = forms.DateField(help_text='Required. Format: YYYY-MM-DD')

class Meta:

model = User

fields = ('username', 'birth_date', 'password1', 'password2', )

views.py

django.contrib.auth import login, authenticate

django.shortcuts import render, redirect

pre_user.forms import SignUpForm

signup(request):

if request.method == 'POST':

form = SignUpForm(request.POST)

if form.is_valid():

user = form.save()

user.refresh_from_db() # load the profile instance created by the signal

user.profile.birth_date = form.cleaned_data.get('birth_date')

user.save()

raw_password = form.cleaned_data.get('password1')

user = authenticate(username=user.username, password=raw_password)

login(request, user)

return redirect('article-list')

else:

form = SignUpForm()

return render(request, 'pre_user/signup.html', {'form': form})

4 . 模板文件不需要修改

截图

用户认证模式2： 邮箱注册

这是最常见的用户注册模式

扩展用户创建的forms.py

class SignUpForm(UserCreationForm):

""" 使用邮箱注册"""

email = forms.EmailField(max_length=254, help_text='Required. Inform a valid email address.')

class Meta:

model = User

fields = ('username', 'email', 'password1', 'password2', )

views.py

(1) 注册视图

def signup(request):

if request.method == 'POST':

form = SignUpForm(request.POST)

if form.is_valid():

user = form.save(commit=False)

user.is_active = False

user.save()

current_site = get_current_site(request)

subject = 'Activate Your MySite Account'

message = render_to_string('pre_user/account_activation_email.html', {

'user': user,

'domain': current_site.domain,

'uid': urlsafe_base64_encode(force_bytes(user.pk)),

'token': account_activation_token.make_token(user),

})

# user.email_user(subject, message) # 给该用户发送邮件

user.email_user(subject=subject, message='message',html_message=message) # 给该用户发送邮件

return redirect('account_activation_sent')

# return HttpResponse("邮箱已经发送，请前往验证")

else:

form = SignUpForm()

return render(request, 'pre_user/signup.html', {'form': form})

(2) 用户激活邮箱

def activate(request, uidb64, token):

try:

uid = force_text(urlsafe_base64_decode(uidb64))

user = User.objects.get(pk=uid)

except (TypeError, ValueError, OverflowError, User.DoesNotExist):

user = None

if user is not None and account_activation_token.check_token(user, token):

user.is_active = True

user.profile.email_confirmed = True

user.save()

login(request, user)

return redirect('article-list')

else:

return render(request, 'pre_user/account_activation_invalid.html')

(3) 注册链接

urls.py

urlpatterns = [

url(r'^signup/$', views.signup),

url(r'^login/$', auth_views.login,

{'template_name': 'pre_user/login.html', 'authentication_form': LoginForm}),

url(r'^activate/(?P[0-9A-Za-z_\-]+)/(?P[0-9A-Za-z]{1,13}-[0-9A-Za-z]{1,20})/$',

views.activate, name='activate'),

url(r'^account_activation_sent/$', views.account_activation_sent, name='account_activation_sent'),

]

(4)模板

account_activation_email.html

{% extends 'pre_user/base.html' %}

{% block content %}

{% autoescape off %}

Hi {{ user.username }},

Please click on the link below to confirm your registration:

http://{{ domain }}{% url 'activate' uidb64=uid token=token %}

{% endautoescape %}

{% endblock %}

account_activation_sent.html

{% extends 'pre_user/base.html' %}

{% block content %}

邮件已经发送

{% endblock %}

account_activation_invalid.html

{% extends 'pre_user/base.html' %}

{% block content %}

邮件格式不合法

{% endblock %}