微信小程序pythontoken验证_微信小程序drf登录认证组件

微信小程序-drf登录认证组件

- 通过全局的用户判断是否登录

- 登录用户则校验用户的token值

1. config - settings.js

- api.js

- settings.js

# 模块化&＃xff1a;登录页面路由

module.exports &＃61; {

loginPage: "/pages/login/login"

}

2. utils - auth.js

- auth.js

# 获取应用实例

var settings &＃61; require(&＃39;../config/settings.js&＃39;)

var app &＃61; getApp()

function authentication() {

if (!app.globalData.userInfo) {

wx.navigateTo({

// settings.loginPage,登录路由

url: settings.loginPage

})

return false

}

return true

}

# 认证函数模块化

module.exports &＃61; {

authentication: authentication

}

3. 示例&＃xff1a;用户评论

pages

- newsDetail

- newsDetail.js

// pages/newsDetail/newsDetail.js

var api &＃61; require("../../config/api.js")

var auth &＃61; require(&＃39;../../utils/auth.js&＃39;)

var app &＃61; getApp()

# 评论之前判断用户是否登录

onClickShowCommentModal: function(e) {

if (!auth.authentication()) {

return

}

var replyInfo &＃61; e.currentTarget.dataset;

this.setData({

isShowCommentModal: true,

reply: replyInfo,

});

},

4. 提交评论-- 用户已登录&＃xff0c;发送请求携带token值

&＃39;&＃39;&＃39;

# 请求头携带用户的token值&＃xff0c;此处涉及到js的三元运算

header: {

Authorization: userInfo ? "token " &＃43; userInfo.token : ""

},

&＃39;&＃39;&＃39;

onClickPostComment: function() {

// 发布评论&＃xff0c;将评论数据发送到后台接口

var userInfo &＃61; app.globalData.userInfo;

wx.request({

url: api.Comment,

data: this.data.reply,

method: &＃39;POST&＃39;,

dataType: &＃39;json&＃39;,

header: {

Authorization: userInfo ? "token " &＃43; userInfo.token : ""

},

responseType: &＃39;text&＃39;,

success: (res) &＃61;> {

...

}

})

}

5. 后端校验 token值是否一致

utils

- auth.py

&＃39;&＃39;&＃39;

如果用户已登录&＃xff0c;则在request.user和request.auth中赋值&＃xff1b;未登录则做任何操作。

用户需要在请求头Authorization中传递token&＃xff0c;格式如下&＃xff1a;

Authorization: token 401f7ac837da42b97f613d789819ff93537bee6a

建议&＃xff1a;配合和配置文件一起使用&＃xff0c;未认证的用户request.user和request.auth的值为None

REST_FRAMEWORK &＃61; {

"UNAUTHENTICATED_USER":None,

"UNAUTHENTICATED_TOKEN":None

}

&＃39;&＃39;&＃39;

通用认证

#!/usr/bin/env python

# -*- coding:utf-8 -*-

from rest_framework.authentication import BaseAuthentication

from rest_framework.authentication import get_authorization_header

from apps.api import models

from rest_framework import exceptions

class GeneralAuthentication(BaseAuthentication):

"""

通用认证(所有页面都可以应用)

"""

keyword &＃61; "token"

def authenticate(self, request):

# 认证元组

auth_tuple &＃61; get_authorization_header(request).split()

# 1.如果没有传token&＃xff0c;则通过本次认证&＃xff0c;进行之后的认证

if not auth_tuple:

return None

# 2.如果传递token&＃xff0c;格式不符&＃xff0c;则通过本次认证&＃xff0c;进行之后的认证

if len(auth_tuple) !&＃61; 2:

return None

# 3.如果传递了token&＃xff0c;但token的名称不符&＃xff0c;则通过本次认证&＃xff0c;进行之后的认证

if auth_tuple[0].lower() !&＃61; self.keyword.lower().encode():

return None

# 4.对token进行认证&＃xff0c;如果通过了则给request.user和request.auth赋值&＃xff0c;否则返回None

try:

token &＃61; auth_tuple[1].decode()

user_object &＃61; models.UserInfo.objects.get(token&＃61;token)

return (user_object, token)

except Exception as e:

return None

用户认证

class UserAuthentication(BaseAuthentication):

"""

token 认证

"""

keyword &＃61; "token"

def authenticate(self, request):

auth_tuple &＃61; get_authorization_header(request).split()

&＃39;&＃39;&＃39;

print(auth_tuple)

auth_tuple &＃61; [b&＃39;token&＃39;, b&＃39;a33409078e8ff69c16e813442ac1ce5d&＃39;]

&＃39;&＃39;&＃39;

if not auth_tuple:

raise exceptions.AuthenticationFailed(&＃39;认证失败&＃39;)

if len(auth_tuple) !&＃61; 2:

raise exceptions.AuthenticationFailed(&＃39;认证失败&＃39;)

if auth_tuple[0].lower() !&＃61; self.keyword.lower().encode():

raise exceptions.AuthenticationFailed(&＃39;认证失败&＃39;)

try:

token &＃61; auth_tuple[1].decode()

user_object &＃61; models.UserInfo.objects.get(token&＃61;token)

return (user_object, token)

except Exception as e:

raise exceptions.AuthenticationFailed(&＃39;认证失败&＃39;)

视图函数添加认证类 --评论

from utils.auth import UserAuthentication, GeneralAuthentication

class CommentView(CreateAPIView, ListAPIView):

&＃39;&＃39;&＃39;

POST请求提交评论&＃xff1a;用户认证类

&＃39;&＃39;&＃39;

serializer_class &＃61; CommentModelSerializer

queryset &＃61; models.CommentRecord.objects

filter_backends &＃61; [ChildCommentFilter, ]

def get_authenticators(self):

if self.request.method &＃61;&＃61; &＃39;POST&＃39;:

return [UserAuthentication(), ]

return [GeneralAuthentication(), ]