单点登录前戏(未使用jwt版本)
建表
![](https://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif)
from django.db import models import jwt # Create your models here. # 角色表 class RoleTable(models.Model): role = models.CharField(max_length=30, verbose_name='角色') creator = models.CharField(max_length=30, verbose_name='创建者') create_time = models.DateTimeField(verbose_name='创建时间', auto_now_add=True) # 创建者 # 创建时间 def __str__(self): return self.role class Meta: db_table = 'role' # 用户表 class UserTable(models.Model): name = models.CharField(max_length=30, verbose_name='员工姓名') sex = models.CharField(max_length=10, choices=(('0', '女'), ('1', '男')), verbose_name='员工性别') username = models.CharField(max_length=32, verbose_name='用户名') password = models.CharField(max_length=32, verbose_name='密码') create_time = models.DateTimeField(verbose_name='创建时间', auto_now_add=True) login_time = models.DateTimeField(verbose_name='最近登录时间', auto_now=True) role = models.OneToOneField(RoleTable, on_delete=models.CASCADE) def __str__(self): return self.name class Meta: db_table = 'user'
配置url
from django.urls import path from AccountManager import views app_name = 'account' urlpatterns = [ path('login/', views.Login, name='login'), path('add/', views.addUser, name='add'), ]
配置salt
# 加密字段 SALT = 'haxitaig!@#$%^&*' #根据公司自定制salt
创建日志
首先自己配置settings.py
![](https://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif)
LOGGING = { 'version': 1, 'disable_existing_loggers': True, 'formatters':{ "generic": { "format": "%(asctime)s [%(process)d] [%(levelname)s] %(message)s", "datefmt": "[%Y-%m-%d %H:%M:%S %z]", "class": "logging.Formatter" }, "access": { "format": "%(message)s", "class": "logging.Formatter" } }, 'loggers': { "AuthCert.error": { "level": "INFO", "handlers": ["error_file"], "propagate": 1, "qualname": "AuthCert.error" }, "AuthCert.access": { "level": "INFO", "handlers": ["access_file"], "propagate": 0, "qualname": "AuthCert.access" } }, 'handlers': { "console": { "class": "logging.StreamHandler", "formatter": "generic", "stream": "sys.stdout" }, "error_file": { "class": "logging.FileHandler", "formatter": "generic", "filename": "./log/error.log" }, "access_file": { "class": "logging.handlers.RotatingFileHandler", "maxBytes": 1024 * 1024, "backupCount": 5, "formatter": "generic", "filename": "./log/acess.log", } }, }
接着,在views.py中生成logging
![](https://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif)
import logging logger = logging.getLogger('AuthCert.error') #然后使用logger.ingo('')、 logger.error('')
添加数据
![](https://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif)
def addUser(request): """ 增加用户 """ if request.method == "POST": #添加数据 role = request.POST.get('role') # creator = request.POST.get('creator') name = request.POST.get('name') sex = request.POST.get('sex') username = request.POST.get('username') password = request.POST.get('password') # if not all([role, creator, name, sex, username, password]): if not all([role, name, sex, username, password]): #如果参数没有填写完毕,返回‘参数不全’ logger.error('canshubuquan') return HttpResponse('参数不全') # 对密码进行MD5加密 else: try: pwd_salt = password + SALT #对前端填写的password进行加盐 password = hashlib.md5(pwd_salt.encode()) password = password.hexdigest() print('password= ', password) # 保存角色数据导数据库 Role = RoleTable() Role.role = role # Role.creator = creator Role.save() # 保存用户数据到数据库 User = UserTable() User.role = Role User.name = name User.sex = sex User.username = username User.password = password User.save() logger.info('增加用户成功') return HttpResponse('add user success') except Exception as e: logger.error(e) return HttpResponse(e) else: return render(request, 'add.html')
用户登录
![](https://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif)
def Login(request): """ 用户登录 """ if request.method == "POST": username = request.POST.get('username') pwd = request.POST.get('password') pwd_salt = pwd + SALT #使用salt加密pwd password = hashlib.md5(pwd_salt.encode()) password = password.hexdigest() user = UserTable.objects.filter(username=username, password=password) #使用前端获取的username,和加密后的pwd,与数据库里的username,pwd进行对比 if len(user): logger.info('success') #打印日志 return HttpResponse('登录成功') else: logger.error('username 、 password Error') return HttpResponse('用户名密码不正确') else: return render(request, 'login.html')