drf自定义token生成和token验证

秦羽 2020-08-24 PM 1026℃ 0条

> 有时候在drf项目里不想使用django自带的User表而是自定义用户表，那么想用drf的token认证就需要自定义token生成函数和重写token认证类。

## 说明
- TUserInfo 是自定义的用户表
```python
# models.py
class TUserInfo(models.Model):
    user_id = models.IntegerField(primary_key=True)
    user_name = models.CharField(max_length=255)
    pass_word = models.CharField(max_length=255)
    create_time = models.DateTimeField()
    state = models.CharField(max_length=1)

class Meta:
        managed = False
        db_table = 't_user_info'
```

## 自定义登录生成token
```python
# views.py
from rest_framework.views import APIView
from .models import *
from .serializers import *
from rest_framework.response import Response
from DrfTest2.settings import SECRET_KEY as key
import jwt
import time

class LoginView(APIView):
    authentication_classes = [] #不需要进行token验证
    def post(self,request,*args,**kwargs):
        user_id=request.data.get('user_id')
        pass_word=request.data.get('pass_word')
        print(user_id,pass_word)
        if not user_id or not pass_word:
            return Response({'code':-1,'msg':'缺少必要参数'})
        my_user=TUserInfo.objects.filter(user_id=user_id).first()
        print(my_user)
        if not my_user or my_user.pass_word!=pass_word:
            return Response({'code':-2,'msg':'账号或密码错误'})
        #生成token
        set={
            'exp':int(time.time()+24*60*60),#超时时间
            'iat':int(time.time()),#生成token时间
            'user_id':user_id
        }
        token=jwt.encode(set,key=key,algorithm='HS256')
        return Response({
            'code':'0',
            'msg':'',
            'token':token,
            'user_id':user_id
        })

```

## 重写token认证类
```python
# token.py
from rest_framework.authentication import BaseAuthentication
from rest_framework import exceptions
import jwt
from DrfTest2.settings import SECRET_KEY as key
from .models import TUserInfo
from jwt import ExpiredSignatureError

class TokenAuthentication(BaseAuthentication):
    def authenticate(self, request,*args,**kwargs):
        token = request.META.get('HTTP_AUTHORIZATION')
        print('token=',token)
        if not token:
            raise exceptions.AuthenticationFailed('请提交token')  # exceptions 会被自定义的错误处理捕捉，并返回
        try:
            decode_info = jwt.decode(token, key, algorithms='HS256')  # 使用pyjwt.decode  解密token ，获取相关用户
            print(decode_info)
            user = TUserInfo.objects.get(user_id=decode_info['user_id'])
            return (user, None)  # 返回的数据由 request.user 接收
        except ExpiredSignatureError:
            raise exceptions.AuthenticationFailed('Token已过期，请重新登录')
        except:
            raise exceptions.AuthenticationFailed('验证失败')
```

## 配置url
```python
# urls.py
urlpatterns = [
    url(r'^login/$',views.LoginView.as_view())
]
```

## 配置settings.py
```python
# settings.py
REST_FRAMEWORK = {
    # 身份验证
    'DEFAULT_AUTHENTICATION_CLASSES': (
        'rest_framework_jwt.authentication.JSONWebTokenAuthentication',
        'rest_framework.authentication.SessionAuthentication',
        'rest_framework.authentication.BasicAuthentication',
        'drftest.token.TokenAuthentication'
    ),
}
```

## 注意
- 认证类必须单独存放在py文件内，若放在view内，使用全局配置时候，无法使用

参考：
[https://www.cnblogs.com/noteaddr/p/12937030.html](https://www.cnblogs.com/noteaddr/p/12937030.html)
[https://blog.csdn.net/qq_33961117/article/details/84992339](https://blog.csdn.net/qq_33961117/article/details/84992339)

标签: token, jwt, drf

非特殊说明，本博所有文章均为博主原创。

如若转载，请注明出处：https://www.qinyu.cc/archives/76.html

上一篇 Pyhton将文本中的中文字符转为英文字符

下一篇 django的save的坑

drf自定义token生成和token验证

评论啦~

栏目分类

标签云

友情链接申请

drf自定义token生成和token验证

 评论啦~

 栏目分类

标签云

友情链接申请

评论啦~

栏目分类

标签云

友情链接申请