1.自定义登录
1）创建user表
user->models.py
class Users(models.Model):
username=models.CharField(max_length=10,unique=True,verbose_name='用户名')
password=models.CharField(max_length=255,verbose_name='密码')
create_time=models.DateTimeField(auto_now_add=True,verbose_name='创建时间')
operate_time=models.DateTimeField(auto_now=True,verbose_name='修改时间')
class Meta:
db_table='users'
2)用户注册代码
def register(request):
if request.method=='GET':
# 如果请求为get，返回注册页面
return render(request,'register.html')
if request.method=='POST':
#校验参数
form=UserForm(request.POST)
# 判断是否校验成功，is_valid()为true校验成功
if form.is_valid():
# 注册,使用make_password进行密码加密，否则为明文
password=make_password(form.cleaned_data['password1'])
Users.objects.create(username=form.cleaned_data['username'],
password=password)
# 跳转到登录页面，使用namespace:name
return HttpResponseRedirect(reverse('user:login'))
else:
return render(request,'register.html',{'form':form})
2.设置装饰器
1）创建user_ticket表
class UserTicket(models.Model):
#
user=models.ForeignKey(Users)
ticket=models.CharField(max_length=30)
create_time=models.DateTimeField(auto_now_add=True,verbose_name='创建时间')
max_age=models.DateTimeField(auto_now=True,verbose_name='修改时间')
class Meta:
db_table='user_ticket'
2)登录：
def login(request):
if request.method=='GET':
return render(request,'login.html')
if request.method=='POST':
# 校验登录页面传递的参数
form=LoginForm(request.POST)
# 使用is_valid()判断是否校验成功
if form.is_valid():
# 登录的设置
# 1.通过用户名和密码获取当前的user对象-->类似authenticate
user=Users.objects.filter(username=form.cleaned_data['username']).first()
if user:
# 可以通过username获取到对象
# 将user.password和from.form.cleaned_data['password']进行校验
if check_password(form.cleaned_data['password'],user.password):
# 校验用户名和密码都成功
#1.向cookie中设置随机参数ticket
res = HttpResponseRedirect(reverse('user:index'))
ticket=get_ticekt()
# set_cookie(key,value,max_age'',expires='')，key键，value值，max_age存活时间-s，expires-天
# 设置cookie中的随机值-->类似auth.login
res.set_cookie('ticket',ticket,max_age=100)
# 删除cookie,delete_cookie(key)
# delete_cookie('ticket')
# 2.在表user_ticket中设置这个ticket和user的对象关系
# 设置user_ticket中ticket的随机值
UserTicket.objects.create(user=user,ticket=ticket)
return res
else:
# 密码错误
return render(request,'login.html',{'password':'密码错误'})
else:
# 登录系统的用户不存在
return render(request,'login.html',{'username':'用户不存在'})
pass
else:
return render(request,'login.html',{'form':form})
3）登录跳转首页验证（装饰器）
方法一：
得到随机ticket
utils->functions->get_ticekt
def get_ticekt():
s='1234567890qwertyuiopasdfghjklzxcvbnm'
ticket=''
for i in range(25):
ticket+=random.choice(s)
return ticket
user->views
def index(request):
if request.method=='GET':
# 从cookie中拿ticket
ticket=request.COOKIES.get('ticket')
user_ticket=UserTicket.objects.filter(ticket=ticket).first()
if user_ticket:
#获取当前登录系统的用户
user=user_ticket.user
return render(request,'index.html',{'user':user})
else:
return HttpResponseRedirect(reverse('user:login'))
方法二：
创建装饰器：
# func是一个函数，该函数是在装饰器下面的函数
def is_login(func):
def check(request):
ticket=request.COOKIES.get('ticket')
# 如果cookie中存在设置的ticket则通过user_ticket表进行校验
if ticket:
user_ticket=UserTicket.objects.filter(ticket=ticket).first()
if user_ticket:
return func(request)
else:
# ticket参数错误，则跳转到登录
return HttpResponseRedirect(reverse('user:login'))
else:
# 没有登录
return HttpResponseRedirect(reverse('user:login'))
return check
方法三：
djg6->settings->MIDDLEWARE:末尾添加
'utils.UserAuthMiddleWare.UserMiddleware',
utils中创建UserAuthMiddleWare.py
from datetime import datetime
from django.http import HttpResponseRedirect
from django.urls import reverse
from django.utils.deprecation import MiddlewareMixin
from user.models import UserTicket
class UserMiddleware(MiddlewareMixin):
# 重构拦截请求的方法
def process_request(self,request):
# 排除不需要登录验证的地址
not_login_path=['/user/login/','/user/register/']
path=request.path
# 校验不需要登录验证的地址
for n_path in not_login_path:
# 如果当前访问的地址是登录或注册地址，则直接访问对应的视图函数
if path==n_path:
return None
# ticket=request.COOKIES.get('ticket')
ticket=request.COOKIES.get('ticket')
# 如果请求的cookie中没有ticket,则跳转到登录
if not ticket:
return HttpResponseRedirect(reverse('user:login'))
# 删除user_ticket表中，时间超过了1000s的记录
user_tickets = UserTicket.objects.all()
user_tickets.update(max_age=datetime.now())
for user in user_tickets:
times = datetime.timestamp(user.create_time) + 1000000 - datetime.timestamp(user.max_age)
if times < 0:
user.delete()
# 如果请求的user_ticket中没有与cookie中相等的ticket,则跳转到登录
user_ticket=UserTicket.objects.filter(ticket=ticket).first()
if not user_ticket:
return HttpResponseRedirect(reverse('user:login'))
# 设置全局的user
request.user=user_ticket.user
# 返回中间件执行结束，可返回None或可不写
return None
4)删除ticket
utils->UserAuthMiddleWare.py
# 删除user_ticket表中，时间超过了1000s的记录
user_tickets = UserTicket.objects.all()
user_tickets.update(max_age=datetime.now())
for user in user_tickets:
times = datetime.timestamp(user.create_time) +8*60*60+100 - datetime.timestamp(user.max_age)
if times < 0:
user.delete()
5)注销
方法一：
views
def logout(request):
if request.method=='GET':
# 注销写法
ticket=request.COOKIES.get('ticket')
user_ticket=UserTicket.objects.filter(ticket=ticket).first()
if user_ticket:
user_ticket.delete()
return HttpResponseRedirect(reverse('user:login'))
方法二：
utils->functions.py->is_logout:
def is_logout(func):
def check(request):
ticket = request.COOKIES.get('ticket')
if ticket:
user_ticket = UserTicket.objects.filter(ticket=ticket).first()
if user_ticket:
user_ticket.delete()
return func(request)
else:
return HttpResponseRedirect(reverse('user:login'))
else:
return HttpResponseRedirect(reverse('user:login'))
return check