14：django 用户认证系统

>>> from django.contrib.auth.models import User
>>> user = User.objects.create_user('john', 'lennon@thebeatles.com', 'johnpassword')
>>> user.save()

>>> from django.contrib.auth.models import User
>>> u = User.objects.get(username__exact='john')
>>> u.set_password('new password')
>>> u.save()

manage.py createsuperuser --username=joe --email=joe@example.com

from django.contrib.auth.models import Userclass UserProfile(models.Model):
# 必选
user = models.OneToOneField(User) # 自定义的属性或者方法
accepted_eula = models.BooleanField()
favorite_animal = models.CharField(max_length=20, default="Dragons.")

AUTH_PROFILE_MODULE = 'accounts.UserProfile'

# in models.pyfrom django.contrib.auth.models import User
from django.db.models.signals import post_save# definition of UserProfile from above
# ...def create_user_profile(sender, instance, created, **kwargs):
if created:
UserProfile.objects.create(user=instance)post_save.connect(create_user_profile, sender=User)

from django.contrib import admin
from django.contrib.auth.admin import UserAdmin
from django.contrib.auth.models import Userfrom my_user_profile_app.models import UserProfile# Define an inline admin descriptor for UserProfile model
# which acts a bit like a singleton
class UserProfileInline(admin.StackedInline):
model = UserProfile
can_delete = False
verbose_name_plural = 'profile'# Define a new User admin
class UserAdmin(UserAdmin):
inlines = (UserProfileInline, )# Re-register UserAdmin
admin.site.unregister(User)
admin.site.register(User, UserAdmin)

class AnonymousUser(object):
id = None
username = ''
is_staff = False
is_active = False
is_superuser = False
_groups = EmptyManager()
_user_permissions = EmptyManager()

from django.contrib.auth import authenticate
user = authenticate(username='john', password='secret')
if user is not None:
if user.is_active:
print "You provided a correct username and password!"
else:
print "Your account has been disabled!"
else:
print "Your username and password were incorrect."

from django.contrib.auth import authenticate, logindef my_view(request):
username = request.POST['username']
password = request.POST['password']
user = authenticate(username=username, password=password)
if user is not None:
if user.is_active:
login(request, user)
# Redirect to a success page.
else:
# Return a 'disabled account' error message
else:
# Return an 'invalid login' error message.

from django.contrib.auth import logoutdef logout_view(request):
logout(request)
# Redirect to a success page.

from django.contrib.auth.decorators import login_required@login_required
def my_view(request):

def my_view(request):
if not request.user.has_perm('polls.can_vote'):
return HttpResponse("You can't vote in this poll.")

from django.contrib.auth.decorators import user_passes_test@user_passes_test(lambda u: u.has_perm('polls.can_vote'))
def my_view(request):

from django.contrib.auth.decorators import permission_required@permission_required('polls.can_vote', login_url='/loginpage/')
def my_view(request):

• add: user.has_perm('foo.add_bar')
• change: user.has_perm('foo.change_bar')
• delete: user.has_perm('foo.delete_bar')

自定义权限

如果要自定义权限的话，请使用permissions这个meta属性，例如：

直接在程序中创建权限

这个方法与上面的方法相比，

权限API

直接看一下permission类的源码

模板中的认证数据

当你使用RequestContent的时候，当前已经登陆的用户和其权限在模板上下文中时可用的

{% if user.is_authenticated %}
<p>Welcome, {{ user.username }}. Thanks for logging in.</p>
{% else %}
<p>Welcome, new user. Please log in.</p>
{% endif %}

{% if perms.foo %}
<p>You have permission to do something in the foo app.</p>
{% if perms.foo.can_vote %}
<p>You can vote!</p>
{% endif %}
{% if perms.foo.can_drive %}
<p>You can drive!</p>
{% endif %}
{% else %}
<p>You don't have permission to do anything in the foo app.</p>
{% endif %}

class Group(models.Model):
name = models.CharField(_('name'), max_length=80, unique=True)
permissions = models.ManyToManyField(Permission,
verbose_name=_('permissions'), blank=True) objects = GroupManager()

class MyBackend(object):
def authenticate(self, username=None, password=None):
# Check the username/password and return a User.

class MyBackend(object):
def authenticate(self, token=None):
# Check the token and return a User.

from django.conf import settings
from django.contrib.auth.models import User, check_passwordclass SettingsBackend(object):
"""
Authenticate against the settings ADMIN_LOGIN and ADMIN_PASSWORD. Use the login name, and a hash of the password. For example: ADMIN_LOGIN = 'admin'
ADMIN_PASSWORD = 'sha1$4e987$afbcf42e21bd417fb71db8c66b321e9fc33051de'
""" supports_inactive_user = False def authenticate(self, username=None, password=None):
login_valid = (settings.ADMIN_LOGIN == username)
pwd_valid = check_password(password, settings.ADMIN_PASSWORD)
if login_valid and pwd_valid:
try:
user = User.objects.get(username=username)
except User.DoesNotExist:
# Create a new user. Note that we can set password
# to anything, because it won't be checked; the password
# from settings.py will.
user = User(username=username, password='get from settings.py')
user.is_staff = True
user.is_superuser = True
user.save()
return user
return None def get_user(self, user_id):
try:
return User.objects.get(pk=user_id)
except User.DoesNotExist:
return None