1.自定義登錄
1）創(chuàng)建user表
user->models.py
class Users(models.Model):
username=models.CharField(max_length=10,unique=True,verbose_name='用戶名')
password=models.CharField(max_length=255,verbose_name='密碼')
create_time=models.DateTimeField(auto_now_add=True,verbose_name='創(chuàng)建時(shí)間')
operate_time=models.DateTimeField(auto_now=True,verbose_name='修改時(shí)間')
class Meta:
db_table='users'
2)用戶注冊(cè)代碼
def register(request):
if request.method=='GET':
# 如果請(qǐng)求為get，返回注冊(cè)頁面
return render(request,'register.html')
if request.method=='POST':
#校驗(yàn)參數(shù)
form=UserForm(request.POST)
# 判斷是否校驗(yàn)成功，is_valid()為true校驗(yàn)成功
if form.is_valid():
# 注冊(cè),使用make_password進(jìn)行密碼加密，否則為明文
password=make_password(form.cleaned_data['password1'])
Users.objects.create(username=form.cleaned_data['username'],
password=password)
# 跳轉(zhuǎn)到登錄頁面，使用namespace:name
return HttpResponseRedirect(reverse('user:login'))
else:
return render(request,'register.html',{'form':form})
2.設(shè)置裝飾器
1）創(chuàng)建user_ticket表
class UserTicket(models.Model):
#
user=models.ForeignKey(Users)
ticket=models.CharField(max_length=30)
create_time=models.DateTimeField(auto_now_add=True,verbose_name='創(chuàng)建時(shí)間')
max_age=models.DateTimeField(auto_now=True,verbose_name='修改時(shí)間')
class Meta:
db_table='user_ticket'
2)登錄：
def login(request):
if request.method=='GET':
return render(request,'login.html')
if request.method=='POST':
# 校驗(yàn)登錄頁面?zhèn)鬟f的參數(shù)
form=LoginForm(request.POST)
# 使用is_valid()判斷是否校驗(yàn)成功
if form.is_valid():
# 登錄的設(shè)置
# 1.通過用戶名和密碼獲取當(dāng)前的user對(duì)象-->類似authenticate
user=Users.objects.filter(username=form.cleaned_data['username']).first()
if user:
# 可以通過username獲取到對(duì)象
# 將user.password和from.form.cleaned_data['password']進(jìn)行校驗(yàn)
if check_password(form.cleaned_data['password'],user.password):
# 校驗(yàn)用戶名和密碼都成功
#1.向cookie中設(shè)置隨機(jī)參數(shù)ticket
res = HttpResponseRedirect(reverse('user:index'))
ticket=get_ticekt()
# set_cookie(key,value,max_age'',expires='')，key鍵，value值，max_age存活時(shí)間-s，expires-天
# 設(shè)置cookie中的隨機(jī)值-->類似auth.login
res.set_cookie('ticket',ticket,max_age=100)
# 刪除cookie,delete_cookie(key)
# delete_cookie('ticket')
# 2.在表user_ticket中設(shè)置這個(gè)ticket和user的對(duì)象關(guān)系
# 設(shè)置user_ticket中ticket的隨機(jī)值
UserTicket.objects.create(user=user,ticket=ticket)
return res
else:
# 密碼錯(cuò)誤
return render(request,'login.html',{'password':'密碼錯(cuò)誤'})
else:
# 登錄系統(tǒng)的用戶不存在
return render(request,'login.html',{'username':'用戶不存在'})
pass
else:
return render(request,'login.html',{'form':form})
3）登錄跳轉(zhuǎn)首頁驗(yàn)證（裝飾器）
方法一：
得到隨機(jī)ticket
utils->functions->get_ticekt
def get_ticekt():
s='1234567890qwertyuiopasdfghjklzxcvbnm'
ticket=''
for i in range(25):
ticket+=random.choice(s)
return ticket
user->views
def index(request):
if request.method=='GET':
# 從cookie中拿ticket
ticket=request.COOKIES.get('ticket')
user_ticket=UserTicket.objects.filter(ticket=ticket).first()
if user_ticket:
#獲取當(dāng)前登錄系統(tǒng)的用戶
user=user_ticket.user
return render(request,'index.html',{'user':user})
else:
return HttpResponseRedirect(reverse('user:login'))
方法二：
創(chuàng)建裝飾器：
# func是一個(gè)函數(shù)，該函數(shù)是在裝飾器下面的函數(shù)
def is_login(func):
def check(request):
ticket=request.COOKIES.get('ticket')
# 如果cookie中存在設(shè)置的ticket則通過user_ticket表進(jìn)行校驗(yàn)
if ticket:
user_ticket=UserTicket.objects.filter(ticket=ticket).first()
if user_ticket:
return func(request)
else:
# ticket參數(shù)錯(cuò)誤，則跳轉(zhuǎn)到登錄
return HttpResponseRedirect(reverse('user:login'))
else:
# 沒有登錄
return HttpResponseRedirect(reverse('user:login'))
return check
方法三：
djg6->settings->MIDDLEWARE:末尾添加
'utils.UserAuthMiddleWare.UserMiddleware',
utils中創(chuàng)建UserAuthMiddleWare.py
from datetime import datetime
from django.http import HttpResponseRedirect
from django.urls import reverse
from django.utils.deprecation import MiddlewareMixin
from user.models import UserTicket
class UserMiddleware(MiddlewareMixin):
# 重構(gòu)攔截請(qǐng)求的方法
def process_request(self,request):
# 排除不需要登錄驗(yàn)證的地址
not_login_path=['/user/login/','/user/register/']
path=request.path
# 校驗(yàn)不需要登錄驗(yàn)證的地址
for n_path in not_login_path:
# 如果當(dāng)前訪問的地址是登錄或注冊(cè)地址，則直接訪問對(duì)應(yīng)的視圖函數(shù)
if path==n_path:
return None
# ticket=request.COOKIES.get('ticket')
ticket=request.COOKIES.get('ticket')
# 如果請(qǐng)求的cookie中沒有ticket,則跳轉(zhuǎn)到登錄
if not ticket:
return HttpResponseRedirect(reverse('user:login'))
# 刪除user_ticket表中，時(shí)間超過了1000s的記錄
user_tickets = UserTicket.objects.all()
user_tickets.update(max_age=datetime.now())
for user in user_tickets:
times = datetime.timestamp(user.create_time) + 1000000 - datetime.timestamp(user.max_age)
if times < 0:
user.delete()
# 如果請(qǐng)求的user_ticket中沒有與cookie中相等的ticket,則跳轉(zhuǎn)到登錄
user_ticket=UserTicket.objects.filter(ticket=ticket).first()
if not user_ticket:
return HttpResponseRedirect(reverse('user:login'))
# 設(shè)置全局的user
request.user=user_ticket.user
# 返回中間件執(zhí)行結(jié)束，可返回None或可不寫
return None
4)刪除ticket
utils->UserAuthMiddleWare.py
# 刪除user_ticket表中，時(shí)間超過了1000s的記錄
user_tickets = UserTicket.objects.all()
user_tickets.update(max_age=datetime.now())
for user in user_tickets:
times = datetime.timestamp(user.create_time) +8*60*60+100 - datetime.timestamp(user.max_age)
if times < 0:
user.delete()
5)注銷
方法一：
views
def logout(request):
if request.method=='GET':
# 注銷寫法
ticket=request.COOKIES.get('ticket')
user_ticket=UserTicket.objects.filter(ticket=ticket).first()
if user_ticket:
user_ticket.delete()
return HttpResponseRedirect(reverse('user:login'))
方法二：
utils->functions.py->is_logout:
def is_logout(func):
def check(request):
ticket = request.COOKIES.get('ticket')
if ticket:
user_ticket = UserTicket.objects.filter(ticket=ticket).first()
if user_ticket:
user_ticket.delete()
return func(request)
else:
return HttpResponseRedirect(reverse('user:login'))
else:
return HttpResponseRedirect(reverse('user:login'))
return check
