django rest framework 实现用户登录认证详解

pip install djangorestframework

# MySQL 增加mysql 连接DATABASES = { 'default':{  'ENGINE':'django.db.backends.mysql',  'HOST':'127.0.0.1',  'PORT':'3306',  'NAME':'dbname', # 数据库名  'USER':'username',  'PASSWORD':'password',  'OPTIONS':{   'sql_mode': 'traditional'  }, }}

# Application definitionINSTALLED_APPS = [  ... 'rest_framework', 'api',]

from django.db import models# Create your models here.class User(models.Model): username = models.CharField(max_length=32,unique=True) password = models.CharField(max_length=32) class Meta:  db_table = 'user'  verbose_name = verbose_name_plural = '用户信息表'class userToken(models.Model): username = models.OneToOneField(to='User',on_delete=models.DO_NOTHING) token = models.CharField(max_length=60) class Meta:  db_table = 'user_token'  verbose_name = verbose_name_plural = '用户token表'

python manage.py makemigrations python manage.py migrate 

from django.shortcuts import render# Create your views here.import timefrom api import modelsfrom django.http import JsonResponsefrom rest_framework.views import APIViewclass AuthView(APIView): def post(self,request,*args,**kwargs):  ret = {'code':1000,'msg':None}  try:   # 参数是datadict 形式   usr = request.data.get('username')   pas = request.data.get('password')   # usr = request._request.POST.get('username')   # pas = request._request.POST.get('password')   # usr = request.POST.get('username')   # pas = request.POST.get('password')   print(usr)   # obj = models.User.objects.filter(username='yang', password='123456').first()   obj = models.User.objects.filter(username=usr,password=pas).first()   print(obj)   print(type(obj))   print(obj.username)   print(obj.password)   if not obj:    ret['code'] = '1001'    ret['msg'] = '用户名或者密码错误'    return JsonResponse(ret)    # 里为了简单，应该是进行加密，再加上其他参数   token = str(time.time()) + usr   print(token)   models.userToken.objects.update_or_create(username=obj, defaults={'token': token})   ret['msg'] = '登录成功'   #ret['token'] = token  except Exception as e:   ret['code'] = 1002   ret['msg'] = '请求异常'  return JsonResponse(ret)

from django.contrib import adminfrom django.urls import pathfrom django.conf.urls import urlfrom api.views import AuthViewurlpatterns = [ path('admin/', admin.site.urls), url(r'^api/v1/auth/$', AuthView.as_view()),]

# 如下有三种方式获取参数，有些文章介绍，必须使用第二种，# 其实不然，具体使用哪种要看参数的传入形式而定，建议使用第一种，#因为第一种支持key-value 和 json 格式 ，后面两种仅支持 key-value.usr = request.data.get('username')pas = request.data.get('password')# usr = request._request.POST.get('username')# pas = request._request.POST.get('password')# usr = request.POST.get('username')# pas = request.POST.get('password')