Django--JWT认证

目录

1.安装配置

1.1 下载

pip install djangorestframework-jwt

1.2配置settings.py

  • 注册应用
INSTALLED_APPS = [
    'rest_framework_jwt',
]

1.3配置JWT验证

REST_FRAMEWORK = {
    'DEFAULT_AUTHENTICATION_CLASSES': [
        'rest_framework_jwt.authentication.JSONWebTokenAuthentication',  # 在 DRF中配置JWT认证
    ],

}
# jwt载荷中的有效期设置
JWT_AUTH = {
    # token前缀：headers中 Authorization 值的前缀
    'JWT_AUTH_HEADER_PREFIX': 'JWT',
    # token有效期：一天有效
    'JWT_EXPIRATION_DELTA': datetime.timedelta(days=1),
}

2.注册用户

2.1重写User表

from django.contrib.auth.models import AbstractUser

# 用户表
class User(AbstractUser):
    email = models.CharField(max_length=255,null=True,blank=True)
    phone = models.CharField(max_length=255,null=True,blank=True)
    
    class Meta:
        db_table = 'tb_user'

2.2生成Token

  • 创建MybaseView.py
from rest_framework_jwt.settings import api_settings

def creare_token(user):
    # 生成jwt_token
    jwt_payload_handler = api_settings.JWT_PAYLOAD_HANDLER
    jwt_encode_handler = api_settings.JWT_ENCODE_HANDLER
    payload = jwt_payload_handler(user)
    token = jwt_encode_handler(payload)
    print(token)
    return token

2.3序列化器

from .models import *
from rest_framework import serializers
from django.contrib.auth.hashers import make_password
from .MybaseView import creare_token


# 注册用户
class CreateUserSerializers(serializers.Serializer):
    username = serializers.CharField()
    password = serializers.CharField()
    email = serializers.CharField()
    phone = serializers.CharField()
    token = serializers.CharField(read_only=True)

    def create(self, validated_data):
        user = User.objects.create(**validated_data)
        # 密码加密
        password = make_password(validated_data.get('password'))
        user.password = password
        user.save()
        token = creare_token(user)
        user.token = token
        return user

2.4views.py

# 注册用户
class UserView(APIView):
    def post(self, request):
        data = request.data
        # print(data)

        if not all(['username', 'password', 'password2', 'email', 'phone']):
            return Response({'code': 202, 'msg': '参数不全'})

        if data['password'] != data['password2']:
            return Response({'code': 204, 'msg': '两次密码不一致'})

        try:
            user = CreateUserSerializers(data=data)
            user.is_valid()
            print(user.errors)
            user.save()
            return Response({'code': 200, 'msg': '创建用户成功', 'data': user.data})
        except Exception as e:
            return Response({'code': 201, 'msg': '创建失败，请重试'})

2.5 配置路由

urlpatterns = [
    path('user/', views.UserView.as_view()),
]

2.6Postman测试

3.用户登录

3.1views.py

# 用户登录返回数据
def jwt_response_payload_handler(token, user=None, request=None):
    return {
        'userid': user.id,
        'user': user.username,
        'phone': user.phone,
        'token': token
    }

3.2配置路由

om rest_framework_jwt.views import obtain_jwt_token


urlpatterns = [
    path('user/', views.UserView.as_view()),     # 注册
    path('login/', obtain_jwt_token),		 # 登录
]

3.3Postman测试

4.测试携带token才可访问接口

4.1views.py

# 登录状态才可查询用户
class UserInfoView(APIView):
    permission_classes = [IsAuthenticated]  # 接口中加权限
    authentication_classes = [JSONWebTokenAuthentication]
    def get(self, request):
        user = User.objects.all()
        obj = UserInfoSerializers(user, many=True)
        return Response({'code': 200, 'msg': '查询成功', "data": obj.data})

4.2序列化器

class UserInfoSerializers(serializers.ModelSerializer):
    class Meta:
        model = User
        fields = ('id','username','phone','email')

4.3配置路由

urlpatterns = [
    path('user/', views.UserView.as_view()),			# 注册
    path('login/', obtain_jwt_token),				# 登录
    path('get_user/', views.UserInfoView.as_view()),	        # 测试登录状态访问接口
]

4.4Postman测试

posted @ 2020-11-02 20:54  Daniel*  阅读(137)  评论(0)  编辑  收藏  举报