五 Django 1.5.4 User Authentication 用户认证
一.创建drinker app
./manage.py startapp drinker
在INSTALL_APPS添加drinker
用户的Profile模型，django里面是可以自定义的。
通过在settings.py里面指定AUTH_PROFILE_MODULE变量的值就可以了。
AUTH_PROFILE_MODULE ＝ ‘package.model_name’ # profiles.Profile
用户可以使用user.get_profile()来获取自己的profile信息。
在settings.py中添加
AUTH_PROFILE_MODULE='drinker.Drinker'
里面有一个@login_required标签。其作用就是告诉程序，使用这个方法是要求用户登录的。
1.如果用户还没有登录，默认会跳转到‘/accounts/login/’。这个值可以在settings文件中通过LOGIN_URL参数来设定。（后面还会自动加上你请求的url作为登录后跳转的地址，如：/accounts/login/?next=/polls/3/ 登录完成之后，会去请求/poll/3）
2.如果用户登录了，那么该方法就可以正常执行
添加
LOGIN_URL='/login/' LOGIN_REDIRECT_URL='/profile/'
二.修改drinker/models.py
from django.db import models from django.db.models.signals import post_save from django.contrib.auth.models import User # Create your models here. class Drinker(models.Model): user =models.OneToOneField(User) birthday =models.DateField() name =models.CharField(max_length=100) def __unicode__(self): return self.name
运行
./manage.py syncdb
三.修改drinker/admin.py
from django.contrib import admin from drinker.models import Drinker admin.site.register(Drinker)
Meta作用
抽象类
class CommonInfo(models.Model): name = models.CharField(max_length = 100) age = models.PositiveIntegerField() class Meta: Abstract = True class Student(CommonInfo): home_group = models.CharField(max_length = 5)
这样Student就有三个字段：name, age, home_group,所以CommonInfo不可以用作正常的Django model，因为它只是一个抽象基类,它并不生成一个数据库，不能直接实例化或直接保存数据。所以这种抽象基类是非常有用的，它以python的方式提供了一种方法来提取出公共信息，同时仅当子model在创建数据库时才会创建相应的数据。
四.修改drinker/forms.py
最终，如果一个Form实体的数据是合法的，它就会有一个可用的cleaned_data属性。 这是一个包含干净的提交数据的字典。 Django的form框架不但校验数据，它还会把它们转换成相应的Python类型数据，这叫做清理数据。
from django import forms
from django.contrib.auth.models import User
from django.forms import ModelForm
from drinker.models import Drinker
class RegistrationForm(ModelForm):
username=forms.CharField(label=(u'User Name'))
email =forms.EmailField(label=(u'Email Address'))
password=forms.CharField(label=(u'Password'),widget=forms.PasswordInput(render_value=False))
password1=forms.CharField(label=(u'Verify Password'),widget=forms.PasswordInput(render_value=False))
class Meta:
model=Drinker
exclude=('user',)
def clean_username(self):
username=self.cleaned_data['username']
try:
User.objects.get(username=username)
except User.DoesNotExist:
return username
raise forms.ValidationError("That username is already taken,please select another.")
def clean(self):
if self.cleaned_data['password'] != self.cleaned_data['password1']:
raise forms.ValidationError("The passwords did not match. Please try again.")
return self.cleaned_data
class LoginForm(forms.Form):
username =forms.CharField(label=(u'User Name'))
password =forms.CharField(label=(u'Password'),widget=forms.PasswordInput(render_value=False))
五.修改drinker/views.py
from django.http import HttpResponseRedirect
from django.contrib.auth.models import User
from django.contrib.auth.decorators import login_required
from django.shortcuts import render_to_response
from django.template import RequestContext
from drinker.forms import RegistrationForm,LoginForm
from drinker.models import Drinker
from django.contrib.auth import authenticate,login,logout
def DrinkerRegistration(request):
if request.user.is_authenticated():
return HttpResponseRedirect('/profile/')
if request.method == 'POST':
form =RegistrationForm(request.POST)
if form.is_valid():
user =User.objects.create_user(username=form.cleaned_data['username'],email=form.cleaned_data['email'],password=form.cleaned_data['password'])
user.save()
drinker=Drinker(user=user,name=form.cleaned_data['name'],birthday=form.cleaned_data['birthday'])
drinker.save()
return HttpResponseRedirect('/profile/')
else:
return render_to_response('register.html',{'form':form},context_instance=RequestContext(request))
else:
form =RegistrationForm()
context={'form':form}
return render_to_response('register.html',context,context_instance=RequestContext(request))
@login_required
def Profile(request):
if not request.user.is_authenticated():
return HttpResponseRedirect('/login/')
drinker=request.user.get_profile
context={'drinker':drinker}
return render_to_response('profile.html',context,context_instance=RequestContext(request))
def LoginRequest(request):
if request.user.is_authenticated():
return HttpResponseRedirect('/profile/')
if request.method == 'POST':
form=LoginForm(request.POST)
if form.is_valid():
username=form.cleaned_data['username']
password=form.cleaned_data['password']
drinker=authenticate(username=username,password=password)
if drinker is not None:
login(request,drinker)
return HttpResponseRedirect('/profile/')
else:
return render_to_response('login.html',{'form':form},context_instance=RequestContext(request))
else:
return render_to_response('login.html',{'form':form},context_instance=RequestContext(request))
else:
form=LoginForm()
context={'form':form}
return render_to_response('login.html',context,context_instance=RequestContext(request))
def LogoutRequest(request):
logout(request)
return HttpResponseRedirect('/')
Django的User对象提供了一系列的属性和方法，其中password存储的是加密后的密码，is_staff记录用户是否有管理员权限，其他的属性可以参考官方文档。同时django.contrib.auth模块中提供了authenticate()、login()、logout()等函数，分别实现认证、登录、登出等功能。Django还为我们提供了内置的处理login、logout的view函数，但是因为其提供的行为与我们这里要的不一样，所以还需要自己实现view函数。
六.修改templates/register.html
{% extends "base.html" %}
{% block extrahead %}
<script src="http://libs.baidu.com/jquery/1.7.1/jquery.min.js" type="text/javascript"></script>
<script src="http://libs.baidu.com/jqueryui/1.8.18/jquery-ui.min.js" type="text/javascript"></script>
<script>
$(function() {
$( "#id_birthday" ).datepicker();
});
</script>
{% endblock %}
{% block content %}
<form action="" method="post">{% csrf_token %}
{% if form.errors %}
<p> Please correct the following fields: </p>
{% endif %}
<div class="register_div">
{% if form.username.errors %} <p class="error"> {{ form.username.errors }} </p> {% endif %}
<p><label for="username" {% if form.username.errors %} class="error" {% endif %}>Username:</label></p>
<p>{{ form.username }}</p>
</div>
<div class="register_div">
{% if form.email.errors %} <p class="error"> {{ form.email.errors }} </p> {% endif %}
<p><label for="email" {% if form.email.errors %} class="error" {% endif %}>Email:</label></p>
<p>{{ form.email}}</p>
</div>
<div class="register_div">
{% if form.password.errors %} <p class="error"> {{ form.password.errors }} </p> {% endif %}
<p><label for="password" {% if form.password.errors %} class="error" {% endif %}>Password:</label></p>
<p>{{ form.password}}</p>
</div>
<div class="register_div">
{% if form.password1.errors %} <p class="error"> {{ form.password1.errors }} </p> {% endif %}
<p><label for="password1" {% if form.password1.errors %} class="error" {% endif %}>Verify Password:</label></p>
<p>{{ form.password1}}</p>
</div>
<div class="register_div">
{% if form.birthday.errors %} <p class="error"> {{ form.birthday.errors }} </p> {% endif %}
<p><label for="birthday" {% if form.birthday.errors %} class="error" {% endif %}>Birthday:</label></p>
<p>{{ form.birthday}}</p>
</div>
<div class="register_div">
{% if form.name.errors %} <p class="error"> {{ form.name.errors }} </p> {% endif %}
<p><label for="name" {% if form.name.errors %} class="error" {% endif %}>Name:</label></p>
<p>{{ form.name}}</p>
</div>
<p><input type="submit" alt="register"></p>
</form>
{% endblock %}
templates/login.html
{% extends "base.html" %}
{% block content %}
<form action="" method="post">{% csrf_token %}
{% if form.errors %}
<p> Please correct the following fields: </p>
{% endif %}
<div class="register_div">
{% if form.username.errors %} <p class="error"> {{ form.username.errors }} </p> {% endif %}
<p><label for="username" {% if form.username.errors %} class="error" {% endif %}>Username:</label></p>
<p>{{ form.username }}</p>
</div>
<div class="register_div">
{% if form.password.errors %} <p class="error"> {{ form.password.errors }} </p> {% endif %}
<p><label for="password" {% if form.password.errors %} class="error" {% endif %}>Password:</label></p>
<p>{{ form.password}}</p>
</div>
<p><input type="submit" alt="register"></p>
</form>
{% endblock %}
templates/base.html
<html>
<head>
<link rel="stylesheet" type="text/css" href="/static/css/video1.css" />
{% block extrahead %}
{% endblock %}
</head>
<body>
<div id="pageContainer">
<div id="nav_top_right">
{% if user.is_authenticated %}
<p><a href="/logout/">Logout</a></p>
{% else %}
<p><a href="/login/">login</a></p>
{% endif %}
</div>
{% block content %}
{% endblock %}
</div>
</body>
</html>
templates/profile.html
{% extends "base.html" %}
{% block content %}
<p>Name: {{ drinker.name }}</p>
<p>Birthday: {{ drinker.birthday }}</p>
{% endblock %}
urls.py中添加
(r'^register/$','drinker.views.DrinkerRegistration'),
(r'^login/$','drinker.views.LoginRequest'),
(r'^logout/$','drinker.views.LogoutRequest'),
(r'^profile/$','drinker.views.Profile'),